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(U) Preamble 


December 1, 2008 


(U) As the primary investigative agency of the federal government, the FBI has the authority and 
responsibility to investigate all violations of federal law that are not exclusively assigned to 
another federal agency. The FBI is-further vested by law and by Presidential directives with the 
primary role in carrying out criminal investigations and investigations of threats to the national 
security of the United States. This includes the lead domestic role in investigating international 
terrorist threats to the United States, and in conducting counterintelligence activities to counter 
foreign entities’ espionage and intelligence efforts directed against the United States. The FBI is- 
also vested with important functions in collecting foreign intelligence as a member agency of the 
United States Intelligence Community (USIC). (AGG-Don, Introduction) : 


(U) While investigating crime, terrorism, and threats to the national security, and collecting 
foreign intelligence, the FBI must fully comply with all laws and regulations, including those 
designed to protect civil liberties and privacy. Through compliance, the FBI will continue to earn 
the support, confidence and respect of the people of the United States. 


(U).To assist thie-F BI in-its.mission, the -Attorney General-signed The Attorney General's  - 
Guidelines-for Domestic FBI Operations (AGG-Dom) on September 29, 2008. The primary 
purpose of the AGG-Dom and the Domestic Investigations and Operations Guide (DIOG) isto 
‘Standardize policy so that criminal, national security, and foreign intelligence investigative 
activities are accomplished in a consistent manner, whenever possible (e.g., same approval, 
notification, and reporting requirements). In addition tothe DIOG, each FBIHQ substantive 
Division has a-policy implementation guide (PG) that suppleménts this document. Numerous 
_ FBI manuals, electronic communications, letterhead memoranda, and other policy documents are 
incorporated into the DIOG and the substantive Division policy implementation guides, thus, 
consolidating the FBI’s policy guidance. The FBIHQ Corporate Policy Office (CPO) plays an 
instrumental role in this endeavor. Specifically, the CPO maintains the most current version of 
the DIOG on its website. As federal statutes, executive orders, Attorney General guidelines, FBI 
. policies, or other relevant authorities change, CPO will electronically update the DIOG after 
appropriate coordination and required approvals. i i 


(U) The changes implemented by the DIOG should better equip you to protect the people of the 
United States against crime and threats to the national security and to collect foreign intelligence. 
This is your document, and it requires your input so that we can provide the best service to our 
nation. If you discover a need for change, please forward your suggestion to FBIHQ CPO: 


-(U) Thank you for your outstanding service! 
Robert SS Mueller, III 


Director 


2 xi 
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1. (U) Scope and Purpose 


.11. (Ü) Scope 


(U) The DIOG applies to all investigative activities and intelligence collection activities 
conducted by the FBI within the United States or outside the territories of all countries. This . 
policy document does not apply to investigative and intelligence collection activities of the. FBI 
in foreign countries; those are governed by The Attorney General’s Guidelines for 
Extraterritorial FBI Operations. : 


1.2. (U) Purpose 


(U) The purpose of the DIOG is to standardize policy so that criminal, national security, and 
foreign intelligence investigative activities are consistently and uniformly accomplished 
whenever possible (e.g,, same approval, notification, and reporting requirements). 


(U) This policy document also stresses the importance of oversight and self-regulation to ensure 
that all investigative and intelligence collection activities are conducted within Constitutional 
and statutory parameters and that civil liberties and privacy are protected. 


(U)-In-addition-to-this-policy documeiit, each FBIHQ substantive Division-has a: PG that 
supplements the DIOG. As a result, numerous FBI manuals, electronic communications, 


letterhead memoranda, and other policy documents are incorporated into the DIOG and Division 
PGs, thus, consolidating FBI policy guidance. 
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2. (U) General Authorities and Principles 


2.1. (U) Scope of the Attorney General’s Guidelines for Domestic FBI Operations 


(U) The Attorney General’s Guidelines for Domestic FBI Operations (AGG-Dom) apply to 
investigative and intelligence collection activities conducted by the FBI within the United States, 
in the United States territories, or outside the territories.of all countries. They do not apply to 
investigative and ‘intelligence collection-activities of the FBI in foreign countries, which will be 
governed by the Attorney General’s Guidelines for Extraterritorial FBI Operations, when 
published. (Reference: AGG-Dom, Part I.A.) 


(U) The AGG-Dom replaces the following six guidelines: 


e (U) The Attorney General’s Guidelines on General Crimes, Racketeering Enterprise and 
Terrorism Enterprise Investigations.(May 30, 2002) 


(U) The Attorney General’s Guidelines for FBI National Security Investigation and 
Foreign Intelligence Collection (October 31, 2003) 


(U) The Attorney General’s Supplemental Guidelines for Collection, Retention, and 
Dissemination of Foreign Intelligence (November 29; 2006) 


(U) The Attorney General Procedure for Reporting and Use of Information Concerning 
Violations of Law and Authorization for Participation in Otherwise Illegal Activity in FBI 
Foreign Intelligence, Counterintelligence or International Terrorism Intelligence 
Investigations (August 8, 1988). 


(U) The Attorney General's Guidelines for Reporting on Civil Disorders and 
Demonstrations Involving a Federal Interest (April 5, 1976) 


(U) The Attorney General’s Procedures for Lawful, Warrantless Monitoring of Verbal 
Communications (May 30, 2002) [only portion applicable to FBI repealed] 


(U) The Attorney General will be issuing a separate set of new guidelines for extraterritorial 
operations, the Attorney General’s Guidelines for Extraterritorial FBI Operations. However, 
certain of the existing guidelines that are repealed by the AGG-Dom currently apply in part to 
extraterritorial operations, including the Attorney General’s Guidelines for FBI National Security 
Investigations and Foreign Intelligence Collection, and the Attorney General Procedure for 
Reporting and Use of Information Concerning Violations of Law.and Authorization for 
Participation in Otherwise Illegal Activity in FBI Foreign Intelligence, Counterintelligence or 
International Terrorism Intelligence Investigations. To énsure that there is no gap in the 
existence of guidelines for extraterritorial operations, these existing guidelines will remain in 
effect in their application to extraterritorial operations until the Attorney General’s Guidelines 
for Extraterritorial FBI Operations are issued and take effect, notwithstanding the general repeal 
of.these existing.guidelines by the AGG-Dom. 


(U) Also, the classified Attorney General Guidelines for Extraterritorial FBI Operation and 
Criminal Investigations.(1993) will continue to apply, to FBI criminal investigations, pending the 
execution of the new guidelines for extraterritorial operations, as discussed above. Finally, for 
national security and foreign. intelligence i investigations, FBI investigative activities will continue 


to be processed as set forth in the classified: Memorandum of Understanding Concerning 
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Overseas and Domestic Activities of the Central Intelli ence Ageric and the Federal Bureau of 





ne (2005). 

2. . (U) General FBI Authorities under AGG-Dom , 
Ra The AGG-Dom recognizes four broad, general FBI authorities. (AGG-Dom, Part I.B. 2 
A. (U) Conduct Investigations and Collect Intelligence and Evidence 


(U) The FBI is authorized to collect intelligence and to conduct investigations to détect, 
obtain information about, and prevent and protect against federal crimes and threats to the 
national security and to collect foreign intelligence, as provided in the DIOG eee: 
Part ID). 


(U) By regulation, the Attorney General has directed the FBI to:investigate violatioūs of the 
laws of the United States and collect evidence in cases in which the United States is or may 
‘be a party in interest, except in cases in which such responsibility is by statute or otherwise 
specifically assigned to another investigative agency. The FBI’s authority to investigate and 
collect evidence involving criminal drug laws of the United States is concurrent with such 
authority of the Drug Enforcement.Administration (28 C.F.R. § 0.85[a]). 


B. (U) Provide Investigative Assistance 


(U) The FBI is authorized to provide. investigative assistance to other federal, state, local, or 
tribal agencies, and foreign agencies as provided in Section 12 of the DIOG (AGG-Dom, Part 
Ill). 


C. (U) Conduct Strategic Analysis and Planning 


(U) The FBI is authorized to conduct intelligence analysis and planning as provided in 
Section 15 of the DIOG (AGG-Dom, Part IV). 


D. (U) Retain and Share Information 


(U) The FBI is authorized to retain and share information obtained pursuant to the AGG- 
Dom, as provided in Section 14 of the DIOG (AGG-Don, Part VI). 


2.3; (U) FBI as an Intelligence Agency 


(U) The FBI is.an intelligence agency as well as a law enforcement agency. Its basic functions 
accordingly extend beyond limited investigations of discrete matters, and include broader 
analytic and planning functions. The FBI’s responsibilities in this area derive from various 
administrative and-statutory sources. See Executive Order 12333; 28 U.S.C. § 532 note 
(incorporating P.L. 108-458 §§ 2001-2003) and 534 note (incorporating P.L. 109-162 § 1107). 


(U) Part IV of the AGG-Dom authorizes the FBI to engage in intelligence analysis and planning, 
drawing on all lawful sources of information. The functions authorized under ‘that Part includes: 
(i) development of overviews and.analyses concerning threats to and vulnerabilities of the United 
States and its interests; (ii) research and analysis to produce reports and assessments (see note 
below) concerning matters relevant to investigative activities or other authorized FBI activities; 
and (iii) the operation of intelligence systems that facilitate and support investigations through 
the compilation and analysis of data and information on an ongoing ‘basis. 


(U) Note: In the DIOG, the word “assessment” has two distinct meanings. The AGG-Dom 
authorizes as an investigative activity an “assessment” which requires an authorized purpose as 
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discussed in the DIOG Section 5. The United States Intelligence Community (USIC), however, 
also uses the word “assessment” to describe written intelligence products as discussed in the 
DIOG Section 15.7.B. 


2.4. (U) FBI Lead Investigative Authorities 
A. (U) Introduction 


(U/IFOUO) The FBI’s primary investigative authority is derived from the authority of the 
Attorney General as provided in 28 U.S.C. §§ 509, 510, 533 .and 534. Within this authority, 
the Attorney General may appoint officials to.detect crimes against the United States and to 
conduct such other investigations régarding official matters under the control of the 
Department of Justice (DOJ) and the Department of State (DOS) as may be directed by the 
Attorney General (28 U.S.C. § 533). The Attorney General has delegated a number of his 
statutory authorities and granted other authorities to the-Director of the FBI (28 C.F.R. 

§ 0.85[a]). Some of these authorities apply both inside and outside the United States. 


‘B. (U) Terrorism and:Counterterrorism Investigations 


(U) The Attorney General ‘has directed the FBI to exercise Lead Agency responsibility in 
investigating all crimes for which DOJ has primary or concurrent jurisdiction and which 
involve terrorist activitiés or acts in preparation of terrorist activities within the statutory 
jurisdiction of the United States. ‘Within the United States, this includes the collection, 
coordination, analysis, management and dissemination of intelligence and criminal 
information, as appropriate. If another federal agericy identifies an individual who is engaged 
in terrorist activities or in acts in preparation of terrorist-activities, the other agency is 
required to promptly notify the FBI. Terrorism, in this context, includes the unlawful use of 
force and violence against persons or property to intimidate or coerce a government, the 
civilian population, ot any segment thereof, to further political or social objectives (28 C.F.R. 
§ 0.85[a]). : 

C. (U) “Federal Crimes of Terrorism” 


(U) Pursuant to the delegation in 28 C.F.R. § 0.85(a), the FBI exercises the Attorney 
General’s lead investigative responsibility under 18 U.S:C. § 2332b(f) for all “federal crimes 
of terrorism” as identified in that statute. Many of these statutes grant the FBI extraterritorial 
‘investigative responsibility. Check the cited'statute for the full particulars concerning 
elements of the offense, jurisdiction, etc. Under 18°U:S.C. § 2332b(g)(5), the term "federal 
crime of terrorism" means an offense that is: (i) calculated to influence or affect the conduct 
of government by intimidation or coercion or to retaliate against government conduct; and (ii) 
is a violation of federal statute relating to: 


1. (U) Destruction of aircraft or aircraft facilities (18 U.S.C. § 32); 


2. (U) Violence at international airports-(applies to offenses occurring outside the United 
States.in.certain situations) (18 U.S.C. § 37); 


3. (U) Arson within “special maritime and territorial jurisdiction of the United States” 
(SMTJ is defined in 18 U.S.C. § 7) (18 U.S.C. § 81); 


4. (U) Prohibitions with respect to biological weapons (extraterritorial federal jurisdiction if 
offense committed by or against a United States national) (18 U.S.C. § 175); 
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5. (U) Possession of biological agents or toxins by restricted persons (18 U.S.C. § 175b); 


1 


—_ 


(U) Variola virus (includes smallpox and other derivatives of thé variola major virus) 
(applies to offenses occurring outside the United States in certain situations) (18 U.S.C. 
§ 1750); 


. (U) Prohibited activities regarding chemical weapons (applies to offenses occurring 


outside the United States in certain situations) (18 U.S.C. § 229) (E.O. 13128 directs any 
possible violation of this statute be referred to the FBI); ' 


. (U) Congressional, Cabinet, and Supreme Court assassination, kidnapping and assault (18 


U.S.C. § 351[a]-[d]) (18 U.S.C. § 351[g] directs that the FBI shall investigate violations 
of this statute); i 


. (U) Prohibited transactions involving nuclear materials (applies to offenses occurring 


outside the United States in certain situations) (18 U.S.C. § 831); 


. (U) Participation in nuclear and weapons of mass destruction threats to the United States 


(extraterritorial federal jurisdiction) (18 U:S.C. § 832); 


+ (U) Importation, exportation, shipping,:transport, transfer, réceipt, or possession.of plastic 


- -exploSives that do.not-contain.a detection.agent.(18 U.S.C. §.842[m] and [n]); 


14. 


15 


16. 





- (U) Arson or bombing of government property risking or causing death (18 U.S.C.. ` 


§ 844[f][2] or [3]) (18 U.S.C. § 846[a] grants FBI and the Bureau.of Alcohol, Tobacco, 
Firearms, and Explosives (ATF) concurrent authority to investigate violations of this 
statute); 


. (U) Arson of bombing of property used in or affecting interstate or foreign commerce (18 


U.S.C. § 844[i]) (18 U.S.C. § 846[a] grants FBI and ATF concurrent authority to 
investigate violations of this statute); 


(U) Killing or attempted killing during an attack on’a federal facility with a dangerous 
weapon (18 U.S.C. § 930[c]); 


. (U) Conspiracy within Uriited States jurisdiction to murder, kidnap, ‘or maim persons at 


any place outside the United States (18 U.S.C. § 956[a][1]); 


(U) Using a computer for unauthorized access,.transmission, or retention of protected 
information (18 U.S.C.°§ 1030[a][1]) (18 U.S.C: § 1030[d][2] grants the FBI “primary 
authority” to investigate Section 1030[a][1] offenses involving espionage, foreign 
counterintelligence, information protected against unauthorized disclosure for reasons of 
national defense or foreign relations, or Restricted Data as defined inthe Atomic Energy 
Act, except for offenses affecting United‘States Secret Service (USSS) duties under 18 
USS.C. § 3056[a]); Í i ` 


+ (U) Knowingly transmitting a program, information, code, or command and thereby. 


intentionally causing damage, without authorization, to a protected computer (18 U.S.C. 


§ 1030fa][S][AI iD); 


. (U) Killing or attempted killing of officers or employees of the United States, including 


any member of the-uniformed services (18 U.S.C. § 1114); 
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19: (U) Murder- or manslaughter of foreign officials, official guests, or internationally 
protected persons (applies to offenses occurring outside the United States in certain 
situations) (18 U.S.C. § 1116) (Attorney General may request military assistance in the 
course of enforcement of this section); 


20. (U) Hostage taking (applies to offenses occurring outside the United States in certain 
situations) (18 U.S.C. § 1203); . i 


21. (U) Willfully injuring or committing any depredation against government property or 
contracts (18 U.S.C. § 1361); . 


22. (U) Destruction of communication lines, stations, or systems (18 U.S.C. § 1362); 


23. (U) Destruction or injury to buildings or property within special.maritime and territorial 
jurisdiction of the United States (18 U.S.C. § 1363); 


24. (U) Destruction of $100,000 or more of an “energy facility” property as defined in the 
statute (18 U-S.C. § 1366); i 


25. (U) Presidential and Presidential staff assassination, kidnapping, and assault (18 U.S.C. 
§ 1751{a], [b], [c], or. [d]) (extraterritorial jurisdiction) (Per 18 U.S.C. § 1751 [i], 1751 
violations must be investigated by.the FBI; FBI may. request assistance from any federal 
[including military], state, or local agency notwithstanding any statute, rule, or regulation 
to the contrary); , -o 


26. (U) Terrorist attacks and other violence against railroad carriers and against mass 
transportation.systems on land, on'water, or through the air (includes a school bus, 
charter, or sightseeing transportation; or any means of transport on land, water, or 
through the air) (18 U.S.C..§ 1992); 


27. (U) Destruction of national defense materials, premises, or utilities (18 U.S.C. § 2155); 


28. (U) Production of defective national defense materials, premises, or utilities (18 U.S.C. 
§ 2156); . 


29. (U) Violence against maritime navigation (18 U.S.C. § 2280); 


30. (U) Violence against maritime fixed platforms (located on the continental shelf of the 
United States or located internationally in certain situations) (18 U.S.C. § 2281); 


3 


j 


- (U) Certain homicides and other violence against United States nationals occurring 
outside of the United States (18 U.S.C. § 2332); 


32. (U) Use of weapons of mass destruction (against’a national of the United States while 
outside the United States; against certain persons or property within the United States; or 
by a national of the United States outside'the United States) (18 U.S.C. § 2332a) (WMD 
defined in 18 U.S.C. § 2332a[c][2]); : 


33. (U) Acts of terrorism transcending national boundaries (includes murder, kidnapping, and 
other prohibited acts occurring inside and outside the United States under specified 
circumstances — including that the victim is a member of a uniform service; includes 
offenses committed in the United States territorial sea and airspace above and seabed 
below; includes offenses committed in special maritime and territorial jurisdiction of the 
United States as defined in 18 U.S.C. § 7) (18 U.S.C. § 2332b); 


6 
UNCLASSIFIED-FOR OFFICIAL USE ONLY 






































UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


34. (U) Bombings of places of public use, government facilities, public transportation 
systems and infrastructure facilities (applies to offenses occurring inside or outside the 
United States in certain situations; does not apply to activities of armed forces during an 
armed conflict) (18 U.S.C. § 2332); 


35. (U) Missile systems designed to destroy aircraft (applies to offenses occurring outside the 
' United States in certain situations) (18 U.S.C. § 2332g); 


36. (U) Radiological dispersal devices (applies to offerises occurring outside the United 
States in certain situations) (18 U.S.C. § 2332h); 


37. (U) Harboring or concealing terrorists (18 U.S.C. § 2339); 
38. (U) Providing material support or resources to terrorists (18 U.S.C. § 2339A); 


39. (U) Providing miaterial support or resources to designated foreign terrorist organizations 
(extraterritorial federal jurisdiction) (18 U.S.C. § 2339B) (“The Attorney General shall 
conduct any investigation of a possible violation of this section, or of any license, order, 
or regulation issued pursuant to this section.” 18 U.S.C. § 2339B[e][1]); 





40. (U) Prohibitions against the financing of terrorism (applies to offenses occurring outside 
the United States in certain situations including on board a vessel flying the flag of the 
United States or an aircraft registered under the laws of the United States) (18 U.S.C. 

' § 2339C) (Memorandum of Agreement between the Attorney General and the.Secretary’ 
of Homeland Security, dated May 13, 2005: FBI leads all terrorist financing 
investigations and operations); 
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— 


. (U) Relating to military-type training from a foreign terrorist organization (extraterritorial 
jurisdiction) (18 U.S.C. § 2339D); 


42. (U) Torture applies only to torture committed outside the United States in certain 
situations; torture is defined in 18 U.S.C. § 2340(18 U.S.C. § 2340A); 


43. (U) Prohibitions governing atoinic weapons (applies to offenses occurring outside the 
United States in certain situations) (42 U.S.C. § 2122) (FBI shall investigate alleged or 
suspected violations per 42 U.S.C. § 2271[b]); 


44. (U) Sabotage of nuclear facilities or fuel (42 U.S.C. § 2284) (FBI shall investigate 
alleged or suspected violations per 42 U.S.C. § 2271[b]); ' 


45. (U) Aircraft pitacy (applies to offenses occurring outside the United States in certain 
situations) (49 U.S.C. § 46502) (FBI shall investigate per 28 U.S.C. § 538); 


46..(U) Assault on a flight crew with a dangerous weapon (applies to offenses occurring in 
the “special aircraft jurisdiction of the United States” as defined in 49 U.S.C. § 46501[2]); 
(second sentence of 49 U.S.C. § 46504) (FBI shall investigate per 28 U.S.C. § 538); 


47. (U) Placement of an explosive or incendiary device on an aircraft (49 U.S.C. 
§ 46505[b][3]) (FBI shall investigate per 28 U.S.C. § 538); 


48. (U) Endangerment of human life on aircraft by means of weapons (49 U.S.C. §.46505[c]) 
(FBI shall investigate per 28 U.S.C. § 538); 


49, (U) Application of certain criminal laws.to acts onaircraft-(if homicide or attempted 
homicide is involved) (applies to offenses occurring in the “special aircraft jurisdiction of 
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the United States” as defined in 18 U.S.C. § 46501[2]); (49 U.S.C. § 46506) (FBI shall 
investigate per 28 U.S.C.-§ 538); 


50. (U) Damage or destruction of interstate gas or hazardous liquid pipeline facility (49 
, U.S.C. § 60123[b]); and : 


51. (U) Section 1010A of the Controlled Substances Import and Export Act (relating to 
’ narco-terrorism). 


D. (U) Additional offenses not defined as “Federal Crimes of Terrorism” 


(U) Title 18 U.S.C. § 2332b(f) expressly grants the Attorney General primary investigative 
authority for additional offenses not defined as “Federal Crimes of Terrorism.” These 
offenses are (Note: nothing in this section of the DIOG may be construed to interfere with 
the USSS under 18 U.S.C. § 3056): 


1. (U) Congressional, Cabinet, and Supreme Court assaults (18 U:S.C. § 351[e]) (18 U.S.C. 
§ 351[g]) directs that the FBI investigate violations of this statute); 


2. (U) Using mail, telephone, telegraph, or other instrument of interstate or foreign 
commerce to threaten to kill, injure, or intimidate any individual, or unlawfully to 
damage or destroy any building, vehicle, or other real or personal-property by means of 
fire or explosive (18 U.S.C. § 844[e]); (18 U.S.C. § 846[a] grants FBI and ATF 
‘concurrent authority to investigate violations of this statute); 


3. (U) Damages or destroys by means of fire or explosive any building, vehicle, or other 
personal or real property, possessed, owned, or leased to the United States or any agency 
thereof, or any institution receiving federal financial assistance (18.U.S.C.-§ 844 [f][1]) 
(18 U.S.C. § 846[a] grants FBI and ATF concurrent authority to investigate. violations of 
this statute); ` 


4. (U) Conspiracy within United States jurisdiction to damage or destroy property ina 
‘foreign country and belonging to a foreign country, or to any railroad, canal, bridge, 
airport, airfield, or other public utility, public conveyance, or public structure, or any 
religious, educational, or cultural property so situated (18 U.S.C. § 956[b]); 


5. (U) Destruction of $5,000 or more. of an “energy facility” property as defined in 18 U.S.C. 
§ 1366(c) (18 U.S.C.-§ 1366[b]); and 
6. (U) Willful trespass upon, injury to, destruction of, or interference with fortifications, 
harbor defenses, of defensive sea areas (18 U.S.C. § 2152). 
E. (U//FOUO) NSPD-46/HSPD-15, “U.S. Policy and Strategy in the War on Terror” 
(U//FOUO) Annex II (Consolidation and Updating of Outdated Presidential Counterterrorism 


Documents), dated January 10, 2007, to National Security Presidential Directive (NSPD)- 
46/Homeland Security Presidential Directive (HSPD) 15, dated March 6, 2006, establishes 


FBI lead responsibilities. as well a e er federa 
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(U//FOUO) Areas addressed in Annex U OÜ 





b2 
b7E 


-F, (U) Counterintelligence and Espionage Investigations 


(U//F OUO) A representative list of federal statutes applicable to counterintelligence and 


espionage investigations appears below. For additional information, refer to the 


Counterintelligence Program Implementation Guide and the current list of espionage and 
counterintelligence authorities. 


. (U) Espionage Investigations of Persons in United States Diplomatic Missions 
Abroad 


(U) Section 603 of the Intelligence Authorization Act of 1990 (P.L. 101-193) states that, 
subject to the authority of the Attorney General, “the FBI shall supervise the conduct of 
all investigations of violations of the espionage laws of the United States by. persons 
employed by or assigned to United States diplomatic missions abroad. All departments 
and agencies shall provide. appropriate assistance to the FBI in the conduct of such: 
investigations.” Consult the Attorney General’s extraterritorial guidelines and other _ 
applicable policy or agreements. 


. (U) Investigations of Unauthorized Disclosure of Classified Information to a Foreign 
Power or Agent of a Foreign Power 


(U) The National Security Act of 1947, as amended, establishes procedures for the 
coordination of counterintelligence activities (50 U.S.C. § 402a). Part of that statute 
requires that, absent extraordinary circumstances as approved by the President in writing 
on a case-by-case basis, the head ofeach executive branch department or agency must 
ensure that the FBI is “advised immediately of any information, regardless of its origin, 
which indicates that classified information is being, or may have been, disclosed in an 
unauthorized manner to a-foreign power or an agent of a foreign power.” 


. (U) Criminal Investigations 


(U//FOUO) In addition to the statutes listed above and below, refer to the Criminal 


Investigative Division (CID) Program Implementation Guide (PG) for additional criminal 


Jurisdiction information. 


1. (U) Investigations of aircraft privacy and related-violations 





(U) The FBI shall investigate any violation of 49:U.S.C. § 46314 (Entering aircraft or 
airport areas in violation of security requirements) or chapter 465 (Special aircraft 
jurisdiction of the United States) of Title 49, United States Code. (28 U.S.C. § 538) 


- (U) Violent crimes against foreign travelers . 
(U) The Attorney General and Director of the FBI shall assist state and local authorities 
in investigating and prosecuting a felony crime of violence in violation of the law of any 


State in which the victim appears.to have been selected because.he or she is a traveler 
from a foreign nation. (28 U.S.C. § 540A[b]) 
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3. (U) Felonious killings of state and local-law enforcement officers (28 U.S.C. § 540); and 
4. (U) Investigations of serial killings (28 U.S.C. § 540B): . 


H. (U) Authority of an FBI Special Agent 


(U) An FBI Special Agent has the authority to: 


- 1. (Q) Investigate violations of the laws, including the criminal drug laws, of the-United 


States (21 'U-S.C. § 871; 28 U.S.C..§§ 533, 534 and 535; 28 C.F.R. § 0.85). 


2. (U) Collect evidence in cases in which thè United States is or may be a party in interest 
(28 C.F.R. § 0.85 [a]) as redelegated through exercise of the authority contained in 28 
C.F.R. § 0.138 to direct, personnel in the FBI. i 


3. (U) Make arrests (18 U.S.C. §§ 3052 and 3062). 


4, (U) Serve and execute.arrest warrants and seize property under warrant; issue and/or 
serve administrative subpoenas; serve subpoenas issued by other proper authority; and 
‘ make civil investigative demands (18 U.S.C. §§ 3052, 3107; 21 U.S.C. § 876; 15 U.S.C. 
§ 1312). 


5. (U) Carty firearms (18 U.S:G. § 3052): 


6. (U) Administer oaths to witnesses attending to-testify or depose in the course of ' 
investigations of frauds on or attempts to defraud the United States or irregularities or 
misconduct of employees or agents of the Unitéd States (5 U.S.C. § 303). 


7. (U) Seize property subject to seizure under the criminal and civil forfeiture laws of the 
United States (e.g., 18 U.S.C. §§ 981 and 982). i 


8. (U) Perform other duties imposed‘by law. 
2.5. (U) Status as Internal Guidance 


(U)- The AGG-Dom and this DIOG are set forth solely for the purpose of internal DOJ and FBI 
guidance. They are not intended to, do not, and may not be relied upon to create any rights, 
substantive or procedural, enforceable by law by any party in any- matter, civil or criminal, nor 
do they place any limitation on otherwise lawful investigative and litigative-prerogatives of the 
DOJ and the FBI. (AGG-Dom, Part I.D.2.) i 


A. 


2.6. (U) Departures from the AGG-Dom 


(U//FOUO) Departure from: the AGG-Dom in Advance of an Operation: A Departure 
from the AGG-Dom must be approved by the.Director of the FBI, by the Deputy Director of 
the FBI, or by an Executive Assistant Director. (EAD) designated by the Director. The 
Director of the FBI has designated the EAD National Security Branch or the EAD.Criminal . 
Cyber Response and Services Branch to grant departures from the AGG-Dom. Notice of the 
departure must be provided to the General Counsel (GC). 


- (U//FOUO) Emergency Exception for a Departure from the AGG-Dom: If a departure 


from the AGG-Dom is necessary without-such prior approval because of the immediacy or 
gravity of a threat to the safety of persons or property or to the national security, the Director. 
the Deputy Director, or a designated EAD, and the GC must be notified by the official 
granting the emergency departure as-soon thereafter as practicable. The FBI must provide 
timely written notice of departurés from the AGG-Dom to the. DOJ Criminal Division or 


> 
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National Security Division (NSD), as appropriate, and the Criminal Division or NSD must 
notify the Attorney General and the Deputy Attorney General. Notwithstanding this 
paragraph, all activities ‘in all circumstances must be carried out in a manner consistent with 
the Constitution and laws of the United States. (AGG-Dom, Part [.D.3.) 


C., (U/FOUO) Records of Departures from the AGG-Dom: The Office of the General 
Counsel (OGC) is responsible for maintaining records of all requests and approvals or 
denials of departures from the AGG-Dom. 


2.7. (U) Departures from the DIOG 


A. -(U//FOUO) Departure from the DIOG in Advance of an Operation: A request for a 
“departure from” any provision of the DIOG must be submitted to the.appropriate 
substantive-program Assistant Director (AD) and to the GC for approval prior to exercising a 
departure from the DIOG. The AD may designate the Deputy Assistant Director (DAD), and 
the GC-may designate the Deputy General Counsel-for the National.Security Law Branch 
(NSLB) or the Deputy General Counsel for the Investigative Law Branch (ILB) to approve 
departures. Notwithstanding this paragraph, all activities-in all circumstances must be carried 
out in a manner consistent with the Constitution and laws of the United States. i? ie 

B. (U//FOUO) Emergency Exception for a Departiire from the DIOG: If a departure is 
necessary because of the immediacy or gravity of a thréat to.the safety of persons or property 
or to thé.national security, the approving.authority may, at‘his/her.discretion, authorize an 
emergency departure from the DIOG. As soon as practicable thereafter, the Special Agent in 
Charge (SAC) or FBIHQ Section Chief must provide, in writing, notice to the appropriate 
AD and GC describing the circumstances and necessity for the departure. Notwithstanding 
this paragraph, all activities in all circumstances. must be carried out ina manner consistent 
with the Constitution and laws of the United States. 


C. (U//FOUO) Records-of Departures from the‘ DIOG: The OGC is responsible for 
maintaining records of all requests and approvals of denials of departures from the DIOG. 


2.8.  (U) Other FBI Activities Not Limited by AGG-Dom 


(U)'The AGG-Dom apply to FBI investigative activities as provided herein and do not limit 
other authorized activities of the FBI, such as the FBI’s responsibilities to conduct background 
checks and inquiries concerning applicants and employees urider federal personnel security.’ 
programs (e.g., background investigations), the FBI’s maintenance and operation of national 
criminal records systems and preparation of national crime statistics, and the forensic assistance 
and administration functions of the FBI Laboratory. (AGG-Dom, Part I.D:4.) 


a 


(U) FBI émployees may incidentally obtain information relating to matters outside of the FBI’s 
primary irivestigative responsibility. For example, information relating to violations of state or: 
local law or foreign | law may be incidentally obtained in the course of investigating federal 
crimes or threats to the national security or in collecting foreign intelligence. The AGG-Dom 
does not bar.the acquisition of such information in the course of authorized investigative 
activities, the retention of such information, or.its dissemination as appropriate to the responsible 
authorities in other jurisdictions. (AGG-Dom, Part II) 
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2.9. (U) Use of Classified Investigative Technologies 


(U) Inappropriate use of classified investigative technologies may risk the compromise of such 
technologies. Hence, in an investigation relating to activities in violation of federal criminal law, 
that does not concern a threat-to the national security or foreign intelligence, the use of. such 
technologies must be in conformity with the Procedures for the Use of Classified Investigative 

- Technologies in Criminal Cases. (AGG-Dom, Part V.B.2) i 


2.10. (U) Application of AGG-Dom and DIOG 


(U//FOUO) The AGG-Dom and DIOG apply to all FBI domestic investigations and operations 

conducted: by “FBI employees” such as, but not limited to, applicable support personnel, 

intelligence analysts, special agents, task force officers, detailees, FB] contractors, and 

confidential human sources‘(CHS). All of these “FBI employees” are bound by the AGG-Dom 

and DIOG. In the DIOG, the use of “FBI employee” implies the use of all personnel descriptions, 

if not otherwise prohibited by law or policy. For example, if the DIOG states the “FBI 

employee” is responsible for a particular investigative activity, the supervisor has the flexibility 
to assign that responsibility to any. person bound by the AGG-Dom and DIOG (i.e., agent, 

` intelligence analyst, task force officer), if not otherwise prohibited by law or policy. 


-(U//FOUO)-FBIHQ Division Policy-Implementation:Guides cannot be less restrictive than the 
DIOG. Additionally, FBIHQ Division Policy Implementation Guides must comply. with the 
policy contained in the DIOG, unless approval for deviation from the DIOG is reviewed by the 
General Counsel and approved by.the FBI Deputy Director. l 
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3. (U) Core Values, Roles, and Responsibilities 


3.1. (U) The FBI’s Core Values 


(U) The FBI’s values do not exhaust the many goals we wish to achieve, but they capsulate them 
as well as can be.done in a few words. The FBI’s core values must be fully understood, practiced, 
shared, vigorously defended, and preserved. The values are: 


e (UV) Rigorous obedience to the Constitution of the United States 

e (U) Respect for the dignity ofall those we protect 

° (U) Compassion 

© (U) Fairness 

e (U)Uncompromising personal integrity and institutional integrity 


e (U) Accountability by accepting responsibility for our actions and decisions and their 
- consequences i 


°° (U) Leadership, by example, both personal and professional 


(U) By observing these core values, we achieve a high level of excellence in performing the 
FBI’s-national security and criminal investigative functions as well as thie trust of the American 
people. Rigorous obedierice to constitutional principles énsures that individually and 
institutionally our adherence to constitutional guarantees is more important than the, outcome of 
any single interview, search for evidence, or investigation. Respect for the dignity of all reminds 
us to wield law enforcement powers with restraint. Fairness and compassion.ensure that we treat 
everyone with the highest regard for constitutional, civil, and human_rights. Personal and 
institutional integrity reinforce each other and are owed to our Nation in ‘exchange for the sacred 
trust and great authority conferred upon us. 


` (U) We who enforce the law must not merely obey it. We have an obligation to set a moral 
example that those whom we protect can follow. Because the.FBI’s success in accomplishing its 
mission is directly related to the support and cooperation of those we protect, these core values 
are the fiber that holds together the vitality of our institution. : 


(U) Compliance 


(U) AIl FBI-personnel must fully comply with all laws, rules, and regulations governing FBI 
investigations, operations, programs and activities, including those set forth in the AGG-Dom. 
We cannot and do not countenance disregard for the law for the sake of expediency in anything 
we do..The FBI expects its personnel to ascertain the laws and régulations that govern the 
activities in which they engage, to acquire sufficient knowledge of those laws, rules, and. 
regulations to understand their requirements and to conform their professional and personal 
conduct accordingly. Under no circumstances will expediency justify disregard for the law.- 
Further, the FBI requires its employees to report to proper authority.any known or suspected 
failures to adhere to the law, rules or regulations by themselves or others. Information for 
reporting such violations is available from the Office of Integrity and Compliance (OIC). 
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FBI policy must be consistent with Constitutional, legal and regulatory requirements. 
Additionally, the FBI must provide sufficient training to affected personnel and ensure ana 
appropriate oversight monitoring mechanisms are in place. 


3.2. (U) Deputy Director Roles and Responsibilities 


(U/IFOUO) The Deputy Director is the proponent of.the DIOG, and he has. ove regarding 
compliance with the DIOG and subordinate implementing procedural directives and.divisional 
specific policy implementation guides (PG). The Deputy Director is also responsible for thé 
development and the delivery of necessary training and-the-execution of the monitoring and 
auditing processes. The Deputy Director works through the Corporate Policy Office (CPO) to 
ensure that the DIOG is updated, as necessary, to comply with changes in the law, rules, or 
regulations, but not later than one year from the effective date of this DIS: and every three 
years thereafter. 


3.3. (U) Special Agent/Intelligence Analyst/Task Force Officer/FBI 
Contractor/Others Roles and Responsibilities 


(U//FOUO) Agents, analysts, task force officers (TFO), FBI contractors and others bound by the 
AGG-Domvand-DIOG must:. 


A. (U//FOUO) Ensure compliance with the DIOG standards for initiating, conducting, and 
closing an investigative activity; collection.activity; or use of an’ ie method, as 
provided in the DIOG; 


B. (U//FOUO) Obtain training on the DIOG standards relevant to his/her position and perform 
activities consistent with those standards; 


C. (U//FOUO) Ensure all investigative activity complies with the Constitution, federal law, 
executive orders, Presidential Directives, AGG-Dom, other Attorney General Guidelines, 
Treaties, Memoranda of Agreement/Understanding, this policy document, and any other 
applicable legal and policy requirements (if an.agent, analyst, TFO, or other individual is 
unsure of the legality of-any action, he/she must consult with his/her supervisor and Chief 
Division Counsel [CDC] or OGC); 


D.. (U/FOUO) Ensure that civil liberties and Piva are protected ern the assessment or 
investigative process; 


E. (U//FOUO) Conduct no investigative activity solely on the basis of activities that are 


protected'by the First Amendment or soley on the basis of the race, ethnicity, national-origin 
or religion of the subject; 


F. (U//FOUO) Comply with the law, rules, or regulations, and report any non-compliance 
concern to the proper authority, as stated in the DIOG Section 3.1; and 


G. (U//FOUO) Identify victims who have suffered direct physical, emotional, or financial harm: 
as result of the commission of federal crimes, offer the FBI's assistance to victims of these 
crimes and provide victims' contact information to the résponsible FBI Victim Specialist, and 
keep them-updated on the status of the investigation. The FBI's responsibility for eae 
victims is continuous as long as there i is an open investigation. 
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3.4. (U) Supervisor Roles and Responsibilities 


. (U) Supervisor Defined: Supervisors include, but are not limited to, Field Office and 
FBIHQ personnel including: Supervisory Intelligence Analyst (SIA), Supervisory Special 
Agent (SSA), Supervisory Senior Resident Agent (SSRA), Unit Chief (UC), Assistant 
Special Agent in Charge (ASAC), Assistant Section Chief (ASC), Section Chief (SC), 
Special Agent in Charge (SAC), Deputy Assistant Director (DAD), Assistant Director (AD), 
Assistant Director in-Charge (ADIC), and Executive Assistant Director (EAD). 


. (U) Supervisor Responsibilities: 


1. (U/FOUO) Anyone in a supervisory role that approves/reviews investigative or 
collection activity must determine whether the standards for initiating, approving, 
conducting, and closing an investigative activity, collection activity or investigative 
method, as provided in the DIOG, are satisfied. 


2. (U//FOUO) Supervisors must monitor to ensure that all investigative activity, collection 
activity and the use of investigative methods comply with the Constitution, federal law, 
Executive Orders, Presidential Directives, AGG-Dom, other Attorney General Guidelines 
Treaties, Memoranda of Agreement/Understanding;-this policy-docuinent,-and.any other 
applicable legal and policy requirements. . 


> 


3. (U//FOUO) Supervisors must obtain training on the DIOG standards relevant to their 
i position-and'conform their decisions to'those standards. Supervisors must also ensure that 
all subordinates have received the required training on the DIOG standards and 
requirements relevant to their positions. 


4. (U//FOUO) All supervisors must ensure that civil liberties and privacy are protected 
throughout the investigative process. : 


5. (U//FOUO) If encountering a practice that does not comply with-the law, rules, or 
regulations, the supervisor must report that compliance-concern to the proper authority 
and, when necessary, take action to maintain compliance. 


6. (U//FOUO) Supervisors must not retaliate or take adverse action against persons who 


raise compliance concerns. (See OIC non-retaliation policy in the CPO policy and 
guidance library) 


. (U//FOUO) Supervisory Delegation: Throughout the DIOG, any requirement imposed on a 
supervisor may be performed by a designated Acting, Primary or Secondary Relief 
Supervisor, unless specified otherwise by federal statute, Executive Order, Presidential 
Directive, Attorney General Guidelines, FBI policy, or any other applicable regulation. All 
delegations must be made in writing and retained appropriately. 


(U//FOUO) A supervisor may delegate authority to a supervisor one level junior to himself or 
herself, unless specified otherwise (e.g., the SAC may delegate authority to the ASAC). This 
delegation must: (i) identify the task delegated; (ii) identify the supervisory position given 
approval authority; (iii) be in writing; and (iv) be retained appropriately. This delegation 
authority is not further delegable. Except as providéd in the preceding paragraph, an SSA or 
SIA may not delegate authority. 


(U//FOUO) Any supervisor can request that a supervisor at a higher level approve a 
particular activity, so long as the higher-level supervisor is in the original approval 
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supervisor’s “chain-of-command” (e.g., SSA approval is required to open a preliminary 
investigation, but the SSA requests that his/her ASAC or SAC approve the preliminary | 
investigation because he/she will be on TDY). Unlike delegations of.authority which require 
written documentation, higher supervisory approval than required by the AGG-Dom or 
DIOG does not require written authorization. 


. (U//FOUO) File Reviews: Full-time supervisors or primary relief supervisors (relief 
supervisors require SAC approval) must conduct investigative file reviews with their 
subordinates, as discussed below. Investigative file.reviews must be conducted with all 
agents, Resident Agents, TFOs, analysts, detailees, and FBI contractors as appropriate. 
Investigative file reviews for probationary agents are recommended every 30 days but must 
be conducted at least every 60-days. 


1, (U/FOUO) Assessment Justification/File Reviews: Supervisors must conduct 30-day 
justification-.reviews for types | and 2 assessments and 90-day file reviews for types 3, 4 
and-6 assessments, as‘required in Section 5 of the DIOG. These justification/file reviews 
must: (i) evaluate the progress made toward the achievement of the authorized purpose 
and objective; (ii) ensure activities that occurred in.the prior 30/90 days were appropriate; 
(iii) determine whether it is reasonably likely that.information may be obtained that is 
relevant to the authorized objective, thereby warranting an extension for another 30/90 
‘days;;(iv) determine whether adequate predication has been developed to-open and/or 
continues to justify a predicated investigation; and (v) determine whether the assessment 
should be terminated., i 


a. (U//FOUO) Type 1 and 2 Assessments: Supervisory justification reviews must 
be conducted for each 30 day period. Following the end of the 30-day period, the 
agent, analyst, TFO, detailee or FBI contractor and the-supervisor have up to 10 
calendar days to complete all aspects of the review and to appropriately document 
the review, as specified in this section of the DIOG. 


b. (U//FOUO) Type 3, 4 and 6 Assessments: Supervisory justification/file reviews 
‘must be conducted for each 90 day period. Following the end.of each 90 day 
period, the agent, analyst, TFO, detailee or FBI contractor and the supervisor-have 
up to 30 days to complete all aspects of the review and to appropriately document 
the review, as specified in this section of the DIOG. Investigative file reviews for 
probationary FBI-employees are recommended-every 30 days but must be 
conducted at least every 60 days. 


2. (U//FOUO) Predicated Investigations: Supervisory investigative file reviews must be 
conducted ‘for each 90 day period. Following the end of each 90 day period, the agent, 
analyst, TFO, detailee or FBI contractor and the supervisor have up’to 30 days to 
complete.all aspects of the review and to appropriately document the review, as specified 
in this section of the DIOG. Invéstigative file.reviews for probationary FBI employees 
are recommended every 30 days but must be conducted at least every 60 days. 


3. (U//FOUO) General Policy for Justification/File Reviews: A justification/file review 
must be: (i) in person or. by telephone when necessary (e.g., FBI employee is TDY); (ii) 
conducted in private; and (iii) noted in the Automated Case Support (ACS) Investigative 
Case Management Case Review or on the FD-71 or Guardian. J ustification/file review 
documentation must bé executed in duplicate, with the subordinate béing permitted to 
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retain a‘copy, and the originals retained by the supervisor in each subordinate’s 
administrative folder until the next inspection. If the subordinate only has applicant cases 
assigned and is in compliance with FBI deadlines and regulations, thein-person 
conference may bé waived. If the conference is waived, the. supervisor will make suitable 
comments concerning the subordinate’s caseload, performance, compliance with FBI 
deadlines and regulations, and record the fact that no conference was held. The results of 
the justification/file reviews must be considered when preparing mid-year progress 
reviews, annual appraisals, and developmental worksheets, except this provision ‘does not 
apply to TFOs, other agency detailees, or FBI Contractors. 


E. (U//F QUO) Unaddressed Work for Assessments and Full Investigations 





ROGO ee ees ee ee 
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(U//FOUO) The FD-71 provides a mechanism to assign an Assessment to an appropriate 
Unaddressed Work File, if appropriate. In the FD-71, the Supervisor must select a reason for . 
assigning the matter to the Unaddressed Work File, and'choose the appropriate classification. 
Upon submitting the FD-71, a new Unaddressed Work File will be opened. 


3.5. (U) Chief Division Counsel Roles and Responsibilities 


(U//FOUO) The Chief Division Counsel (CDC) must review all assessments and predicated 
investigations involving sensitive investigative matters as discussed in DIOG Section 10 as well 
“as review the use of particular investigative methods as discussed in Sections 5 and’ 11 of the 
DIOG. The primary purpose of the CDC’s review is to ensure the legality of the actions 
proposed. Review, in this context, includes a determination that the investigative activity is: (i) 
not legally objectionable (i.e., that it is not based solely on the exercise of First Amendment 
rights or on the race, ethnicity, national origin or religion of the subject; and (ii) founded upon an 
authorized purpose and/or adequate factual predication and meets the standard specified in the 
DIOG. The CDC should also include in his or her review and recommendation, if appropriate, a 
determination of the wisdom of the proposed action (¢.g., the CDC may have no legal objection 
but may recommend denial because the value of the proposal is outweighed by the intrusion into 

~ legitimate privacy interests): The CDC’s determination that an inivestigative-activity is:-(i) not 
legally objectionable; and (ii) warranted from a mission standpoint is based on facts known at the 
time of the review and recommendation. Often these facts are not verified or otherwise 
corroborated until the investigative activity.commences. As a result, the CDC may require 
additional CDC reviews or provide guidance to supervisory personnel with regard to monitoring 
the results of the investigative activity to ensure that the authorized purpose and/or factual 
predication remains in tact after the facts are. developed. 


(U//FOUO) For investigative activities involving a sensitive investigative matter, the CDC must, 
also independently consider the factors articulated in the DIOG and provide the approving 

-authority with a recommendation as to whether, in the CDC’s judgment, the investigative 
activity should be approved. Activities found to be legally objectionable by the CDC may not be 
approved unless and until the CDC’s determination is countermanded by the FBI General 
Counsel or a delegated designee. 


(U//FOUO) Throughout the DIOG, any requirement imposed on the CDC may be performed by 
an Associate Division Counsel (ADC), Legal Advisor, or designated Acting CDC. All CDC 
delegations must be made in writing and retained appropriately. 


-3.6. (U) Office of the General Counsel Roles and Responsibilities 


(U//FOUO) In coordination with the DOJ NSD, the OGC is responsible for conducting regular 
reviews of all aspects of FBI national security arid foreign intelligence activities. The primary 
purpose of the OGC’s review is to ensure the legality of the actions proposed. These reviews, 
conducted at FBI Field Offices and Headquarters’ Units, broadly examine such activities for 
compliance with the AGG-Dom and other applicable.requirements. Review, in this context, 

` includes a determination that the investigative activity is: (i) not legally objectionable (i.e., that it 
is not based solely on the exercise of First Amendment rights or on the race, ethnicity, national: 
origin or religion of the subject; and (ii) founded upon an authorized purpose-and/or adequate - 
factual predication and meets the standard specified in the: DIOG. The OGC should also include 
in its review and recommendation, if appropriate, a determination of the wisdom of the proposed 
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action (e.g., the OGC may have no legal objection but may recommend denial because the value 
of the proposal is outweighed by the intrusion into legitimate privacy interests). The OGC’s 
determination that an investigative activity is: (i) not legally objectionable; and (ii) warranted 
from a mission standpoint is based on'facts known at the time of the review and recommendation. 
Often these facts are not verified or otherwise corroborated until the investigative activity 
commences. As a result, the OGC may require additional OGC reviews or provide guidance to 
supervisory personnel with regard to monitoring the results of the investigative activity to ensure 
that the authorized purpose and/or factual predication remains in tact after the facts are 
developed. j 


(U//FOUO) For those investigative activities involving a sensitive investigative matter requiring 

OGC review, the OGC must independently consider the factors articulated in the DIOG and 
provide the approving authority with a recommendation as to whether, in the OGC’s judgment, 

` the investigative activity should be approved. 


(U//FOUO) Throughout the DIOG, any requirement imposed on the General Counsel may be 
delegated and performed by a designated OGC attorney. All delegatioris must be made in-writing 
and retained appropriately: 


3:7. (U) Corporate Policy Office Roles and Responsibilities 
(U/IFOUO) Subject to the guidance of the Deputy Director, the CPO has oversight of the 
implementation of the DIOG. In the process of implementing and analyzing the DIOG, the CPO 
should report any-apparent compliance risk areas directly to the OIC. Additionally, the CPO will 


work directly with the OIC to ensure that the policies, training and monitoring are adequate to 
meet compliance monitoring procedures. 


3.8. (U) Office of Integrity and Compliance Roles and Responsibilities 


(U//FOUO) OIC is responsible for reviewing the DIOG, and working with each FBI Division 
and the CPO, to identify compliance risk areas and ensure the adequacy of policy statements, 
training and monitoring. When compliance risk areas are identified, the OIC works with the 
Divisions, Field Offices, and/or programs affected by the risk and develops programs to review 
the adequacy of policy statements, training, and monitoring and mitigates those concerns 
appropriately. 


3.9. (U) Operational Program Manager Roles and Responsibilities 


(U//FOUO) FBIHQ Operation Program Managers must review notices and actions received from 
FBI Field Offices pursuant to procedures contained in the applicable FBIHQ substantive 
Division’s policy implementation guide. This responsibility includes notifying the.appropriate 
DOJ entity of FBI Field Office and FBIHQ investigative activities, within the time period 
specified by the AGG-Dom, when required. 


(U//FOUO) FBIHQ Operational Program Managers are responsible for identifying, prioritizing, 
and analyzing potential compliance risks within their programs regarding implementation of the 
DIOG, and developing mitigation plans where warranted. 


(U//FOUO) Operational Program Managers must proactively identify and take appropriate action 
to resolve. potential compliance concerns. In identifying possible compliance concerns, Program 
Managers should consider the following indicators of possible compliance issues: 
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=. ` t ; 
A. (U//FOUO) Similar activities being handled differently from Squad-to-Squad / Unit-to-Unit / 
Field Office-to-Field Office; 


. (U/FOUO) Unusually high need for contact with Headquarters’ Division for basic 
information on how to conduct an activity; d 


w 


- (U//FOUO) Apparent confusion over how to conduct a certain activity; 
- (U/FOUO) Conflicting policy; _ 
. (UF OUO) Non-existent/inaccurate/wrongly targeted training; 


Jma: 


. (U//FOUO) Monitoring mechanisms that do not exist or do not test the right information (e.g. 
file reviews/program management); and 


_ G. (U/FOUO) Inadequate auidit for compliance. 


(U/IFOUO) Operational Program Managers may not retaliate or take adverse action against 
persons who raise compliance concerns. 


3.10. (U) Division Compliance Officer Roles and Responsibilities 
(U//FOUO) Each FBIHQ Division and Field Office must have a Division Compliance Officer 
(DEO) -who-will proactively identify potential-non-compliance risk areas concerning the 
implementation of the DIOG and report them to the proper authority and the OIC. The DCO 


must always be aware that the focus of a compliance program is the identification and resolution 
of a compliance problem and the process must not be punitive or retaliatory. 


3.11. (U) FBI Headquarters Approval Levels 


(U//FOUO) If a DIOG provision does not specifically provide, or prohibit, FBIHQ approval 
authority for conducting certain investigative activities or investigative methods, the below Field 
Office approval authorities equate to the following FBIHQ personnel and approving officials 
when FBIHQ initiates, conducts, or closes an investigative activity or utilizes an investigative 
method: 


e (U//FOUO) Field Office Analyst or Special Agent (SA) = FBJHQ Analyst, SA, or 
Supervisory Special Agent (SSA); i 


e (U//FOUO) Field Office Supervisory Intelligence Analysts (SIA) = FBIHQ SIA; . 


e (U/FOQUO) Chief Division Counsel (CDC) =FBIHQ Office of the General Counsel 
. (OGC); . 


e (U/FOUO) Field Office SSA = FBIHQ Unit Chief (UC); and f : 
e (U//FOUO) Special Agent in.Charge (SAC) = FBIHQ Section Chief (SC). 
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(U) Privacy and Civil Liberties, and Least Intrusive Methods 


4.1. (U) Civil Liberties and Privacy 
(U) Overview 


(U) The FBI is responsible for protectirig the American public, not only from crime and 
terrorism, but also from‘incursions into their constitutional rights. Accordingly, all‘: AGG- 
Dom investigative activities must be carried out with’full adherence to the Constitution, 
federal laws and the principles of civil liberty and privacy. 


(U) The FBI has a long-éstablished commitment to protecting the civil liberties of Americans 
as it investigates threats to national security and public safety. As discussed below, 
compliance with the FBI’s comprehensive infrastructuie of legal limitations, oversight and . 
self-regulation effectively ensures that this commitment is honored. Because our ability to 
achieve our mission requires that we have the trust and confidence of the American public, 
and because that trust and confidence can be significantly shaken by our failure to respect the 
limits of our power, special care:must be taken by all employees to comply with these 


limitations. 


- (U) Purpose of Investigative Activity 


(U) One of the most important safeguards in the AGG-Dom—one that is intended to ensure 
that FBI employees respect the constitutional rights of Americans—is the threshold 
requirement that all investigative activity be conducted for an authorized purpose. Under the 
AGG-Dom that authorized purpose must be an authorized national security, criminal, or 
foreign intelligence collection purpose. 


(U) Simply stating such a purpose is not sufficient, however, to ensure compliance with this’ 
safeguard. It is critical that the authorized purpose not be, or appear to be, arbitrary or 
contrived; that it be well-founded and well-documented; and that the information sought-and 
the investigative method used to obtain it be focused in scope, time, and manner to achieve 
the underlying purpose. Furthermore, there are constitutional provisions that set limits on 
what that purpose may be. It may not’be solely to monitor the exercise of rights that are 
protected by the Constitution, and, equally important, the authorized purpose may not be 
based solely on race, ethnicity, national origin or religion. 


(U) It is important to understand how the “authorized purpose” requirement and these 
constitutional limitations relate to one another. For example, individuals or groups who 
communicate with each other or with members of the public in any form in pursuit of social 


or political causes—such as opposing war or foreign policy, protesting government actions, 


promoting certain religious beliefs—have a fundamental constitutional right to do so. No 
investigative activity may be conducted for the sole. purpose of monitoring the exercise of 
these rights. If, however, there exists a well-founded basis to conduct investigative activity 
for one of the authorized purposes listed above—and that basis is not solely the race, 
ethnicity, national origin or religion of the participants—FBI employees may assess or 
investigate these activities, subject'to other limitations in the AGG-Dom and the DIOG. In 
this situation, the investigative activity would not be based solely on Constitutionally- 
protected conduct or on race, ethnicity, nationality or religion. F inally, although investigative 
activity would be authorized in this situation, it is important that it be conducted in a manner 
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that does not materially interfere with the ability of the individuals or groups to engage in the 
exercise of Constitutionally-protected rights. 


. (U) Oversight and Self-Regulation 


(U) Provisions-of the AGG-Dom, other AGG, and oversight from DOJ.components are 
designed to ensure the activities of the FBI are lawful, appropriate and ethical as well as 
effective in protecting the civil liberties and privacy of individuals in the United:States. DOJ 
and the-FBI’s Inspection Division, OIC, and OGC, along with every FBI employee, share ` 
responsibility for ensuring that the FBI meets these goals. 


(U) In the criminal investigation arena, oversight of FBI activities has traditionally come 
from prosecutors and district courts. Because many national security investigations do not 
result in prosecutions, other oversight mechanisms are necessary. Various features of the 
AGG-Dom facilitate the DOJ NSD oversight functions in the national security and foreign 
‘intelligence collection areas. Relevant requitements and provisions include: (i) required 
notification by the FBI to the DOJ NSD concerning a full investigation that involves foreign 
‘intelligence collection, a full investigation of a United States person in relation to a threat to , 
the national security; or a national security investigation involving a “sensitive investigative 
matter;” (ii) an annual report. by the FBI to the DOJ NSD concerning the FBI’s foreign 

. intelligerice collection program, including information reflecting the scope-and nature of 
foreign intelligence collection activities in each FBI Field Office; (iii) access by the DOJ 
NSD to-information obtained by the FBI through national security or foreign intelligence 
activities; and (iv) general authority for the Assistant Attorney General for National Security 
to-obtain-reports from the FBI concerning these activities. (AGG-Dom, Intro.4.C) 


(U) The DOJ NSD’s Oversight Section and the FBI’s OGC are.responsible for conducting 
regular reviews of all aspects. of FBI national security and foreign intelligence activities. 
These reviews, conducted at FBI Field Offices and FBIHQ Divisions, broadly examine such 
activities for compliance with the AGG-Dom and other applicable requirements. 


(U) Further examples of oversight mechanisms include the involvement of both FBI and 
prosecutorial personnel in the review of undercover operations involving sensitive 
circumstances; notice requirements for investigations involving sensitive investigative 
matters; and notice and oversight provisions for enterprise investigations, which involve.a 
broad examinatién of groups implicated in criminal and national security threats. These 
requirements and procedures help to ensure that the rule of law is respected.in the FBI’s 
activities and that public confidence is maintained in these activities. (AGG-Dom, Intro.4.C) 


(U) In addition to the above-mentioned oversight entities DOJ -has in:place, the FBI is subject 
to a regime of oversight, legal limitations, and self-regulation designed to ensure strict 


adherence to civil liberties. This regime is comprehensive and has many facets, including the 
following: 


1. (U) The Foreign Intelligence:Surveillance Act of 1978, as amended, and Title III of the 
Omnibus and Streets Act of 1968. These laws establish the processes for obtaining 
judicial approval of: electronic surveillance arid physical searches for the purposes of 
collecting foreign intelligence and electronic surveillance for the purpose of collecting 
evidence of crimes. 
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2. (U) The Whistleblower Protection Acts of 1989 and 1998: These laws-protect 
whistleblowers from retaliation. 


3. (U) The Freedom of Information Act of 1966: The law provides the public with access 
to FBI documents not-covered by a specific statutory exemption. 


4. (U) The Privacy Act of 1974: The purpose of the Privacy Act is to balance the 
- government's need to maintain information about United States citizens and legal 

permanent resident aliens with the rights of those individuals to be protected against 
unwarranted invasions of their privacy stemming from the government's collection, use, 
maintenance, and dissemination. of that infortnation. The Privacy Act forbids the FBI 
and other federal agencies 'from collecting information about how individuals-exercise 
their First Amendment rights, unless that collection is expressly authorized by statute or 
by the individual, or is pertinent to and within the scope of an authorized law 
enforcement activity (5 U.S.C. § 552a[e][7]). Except for collection of foreign 
intelligence, activities authorized by the AGG-Dom are authorized law enforcement 
activities or activities for which there is otherwise statutory authority for purposes of 
the Privacy Act. Foreign intelligence-collection is not an authorized law enforcement 
activity. ` 

(U) Congressional Oversight is conducted by various Coniniitteés Of the Unitéd States . 

Congress, but primarily by the Judiciary and Intelligence Committees. These committees 

exercise regular, vigorous oversight into all aspects of the FBI’s operations. To this end, the 

National Security Act of 1947 requires the FBI to keep the intelligence committees (for the 

Senate and House of Representatives) fully and currently informed of substantial intelligence 

activities. This oversight has significantly increased in breadth and intensity since the 1970’s, 

and it provides important additional assurance that the FBI conducts its investigations 

according to the law and the Constitution. 


(U) The FBI’s counterintelligence and counterterrorism operations are subject.to significant 
self-regulation and oversight beyond that conducted by Congress. The Intelligence Oversight 
Board (IOB), comprised of members fiom the President’s Intelligence, Advisory Board 
(PIAB), also conducts oversight of the FBI, Among its other responsibilities, the IOB - 
reviews violations of Thè Constitution, national security låw, E.O. or Presidential Decision 
Directive (PDD) by the FBI and the other intelligence agencies, and issues reports thereon to 
the President and the Attorney General. 


(U). internal FBI safeguards include: (i) the OGC’s Privacy and Civil Liberties Unit (PCLU), 
which reviews plans of any record system proposed within the FBI for compliance with the 
Privacy Act and related privacy protection requirements and policies; (ii) the.criminal and 
national ‘security undercover operations review committees, comprised of senior DOJ and 


FBI officials, which review all proposed undercover operatioris that involve sensitive 


circumstances; (iii) the Sensitive Operations Review Committee (SOR 






(iv) all FBI employees have an obligation to report violations of the DIOG 
to their supervisor, other management officials, or appropriate authorities; and (v) the FBI 
requirement for training of new FBI employees and periodictraining for all FBI employees 
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to. maintain currency on the latest guidelines, changes to laws and regulations, and judicial 
decisions related to constitutional rights and liberties. 


(U) The AGG-Dom and DIOG set forth the standards and requirements under which an 

` investigative activity may be initiated and are designed to provide FBI employees with a 

. framework that maintains the proper balance between the public’s need for effective law 

. enforcement and protection of the national security and the protection of civil liberties and 
privacy. Among the provisions that specifically serve to protect civil liberties and privacy are 
the following: (i) the prohibition against initiating investigations based solely on the exercise 
of First Amendment rights or other constitutionally protected activity; (ii) the requirement 
that FBI employees use the least intrusive method reasonable under the circumstances to 
achieve their investigative goals; and (iii) the prohibition against engaging in ethnic and 
racial profiling. Further, in the context-of collecting foreign intelligence, the FBI is further 
‘required to operate openly and consensually with United States persons; to.the extent 
practicable. 


4.2. (U) Protection of First Amendment Rights 


(U) A fundamental principle of the Attorney General’s guidelines for FBI investigations and 
operations since the. first guidelines were issued in 1976 has been that investigative activity may 
not be based solely. on thé exercise of rights guaranteed by the First Amendment to the United 
States Constitution. This principle carries through to the present day in the AGG-Dom. There is a 
corollary to this principle in the Privacy Act of 1974, 5 U.S.C. § 552a, which prohibits the 
retention of information describing how a person exercises rights under the First Amendment, 
unless there is a valid law enforcement purpose. - 


(U) The First Amendment states: 


(U) Congress shall make no law respecting an establishment of religion or 
prohibiting the free exercise thereof: or abridging the freedom of speech, or of 
the press; or of the right of the people to peaceably assemble, and to petition 
the Government for redress of grievances. 


(U) Although the amendment appears literally to apply only to Congress, the Supreme Court 
made it clear long ago that it also applies to activities of the Executive Branch, including law 
enforcement agencies. Therefore, for FBI purposes, it would be helpful to read the introduction 
to the first sentence as: “The FBI shall take no action respecting .. .” In addition, the word 
“abridging” must be understood. “Abridging,” as used here, means “diminishing.” Thus, it is not 
necessary for a law enforcement action to destroy or totally undermine the exercise of First 
Amendment rights for it to be unconstitutional; significantly diminishing or lessening the ability 
of individuals to exercise these rights without an authorized investigative purpose is sufficient. 


(U) This is not to say that any diminishment of First Amendment rights is unconstitutional. The 
Supreme Court has never held that the exercise of these rights is absolute. In fact, the Court has 
set forth realistic interpretations of what level and kind of government activity actually violates a 
First Amendment right. For example, taken to an extreme, oné could argue that the mere 
possibility of an FBI agent being présent at an open forum (or an on-line presence) would 
diminish the right of free speech by, for example, an anti-war protestor because he/she would be 
afraid to speak freely. The Supreme Court, however, has never found an “abridgement” of First 
Amendment rights based on such a subjective fear. Rather, it requires an action that, from an 
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objective perspective, truly diminishes-the speaker’s message or his/her ability to deliver it (e.g., 
pulling the plug on the sound system). For another example, requiring protestors to use a certain 
parade route may diminish, in a practical sense, delivery of their message. The Court has made it 
clear, however, that for legitimate reasons (e.g., public safety), the government may impose 
reasonable limitations in terms of time, place and manner to the exercise of such rights—as long 
as the ability to deliver the message remains. 


(U) While the language of the First Amendment prohibits action that would abridge the - 
enumerated rights, the implementation of that prohibition in the AGG-Dom reflects the Supreme 
Court’s opinions on the constitutionality of law enforcement action that may impact the exercise 
of First Amendment rights. As stated above, the AGG-Dom prohibits investigative activity for 
the sole purpose of monitoring the exercise of First Amendment rights. The import of the 
distinction between this language and the actual text of the First Amendment language is two- 
fold: (i)the line drawn by the AGG-Dom prohibits even “monitoring” the exercise of First 
Amendment rights (far short of abridging those rights) as the sole purpose of FBI activity; and (ii) 
the requirement of an authorized purpose for all investigative activity provides additional 
protection for the exercise of Constitutionally protected rights. : 

(U) The AGG-Dom classifies investigative activity that involves a religious or political 
organization (or an individual prominent in such an organization) or a member of the news 
media as a “sensitive investigative matter.” That designation recognizes the sensitivity of 
conduct that traditionally involves the exercise of First Amendment rights—i.e., groups wlio 
associate for political or religious-purposes, and the press, The requirements for opening and 
pursuing a “sensitive investigative matter” are set forth in Section 10 of this policy document. It 
should be clear, however, from the discussion below just how-pervasive the exercise of First 
Amendment rights is in American life and that not all protected First Amendment activity will 
fall within the definition of a “sensitive investigative matter.” Therefore, it is essential that FBI 
employees recognize when investigative activity may have an impact on the exércise of these 
fundamental rights and be especially sure that any such investigative activity has a valid law 

‘ enforcement or national security purpose, even if it is not a “sensitive investigative matter” as 
defined in the AGG-Dom and the DIOG. , 


(U) Finally; itis important to note that United States persons (and organizations comprised of 
United States persons) do not forfeit their First Amendment rights simply because they alsó 
engage in criminal activity or in conduct that threatens national security. For example, an 
organization suspected of engaging in acts of domestic terrorism may also pursue legitimate 
political goals and may also engage in lawful means to achieve those goals. The pursuit of these 
goals through constitutionally-protected conduct does not insulate them from legitimate 
investigative focus for unlawful activities—but the goals and the pursuit of theif goals through 
lawful means remain protected from unconstitutional infringement. 


(U) When allegations of First Amendment violations are brought to a court of law, it is usually in 
the form of a civil suit in. which a plaintiff has to prove some actual or potential harm. 
Presbyterian-Church.v. United States, 870 F.2d 518 (9th Cir. 1989). In a criminal trial, a 
defendant-may seek either or both of two remedies as part of a claimn that his or her First 
Amendment rights were violated: suppression of evidence gathered in the alleged First 
Amendment violation, a claitn typically analyzed under the “reasonableness” clause of the 
Fourth Amendment, and dismissal of the indictment on the basis of “outrageous government 
conduct” in violation of the Due Process Clause of the Fifth Amendment. 
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(U) The scope of each of the primary First Amendment tights and their impact on FBI 
investigative activity are discussed below. The First Amendment’s “establishment clause,”—the 
prohibition against the government establishing or sponsoring a specific religion—has little 
application to the FBI and, therefore, is not discussed here. 


A. (U) Free Speech 


(U) The exercise of free speech includes far more than simply speaking on a controversial 
topic in the town square. It iricludes such activities as carrying placards in a parade, sending ` 
letters to a newspaper editor, posting a web site on the Internet, wearing a tee-shirt with a 
political message, placing'a bumper sticker critical of the President on one’s car, and 
publishing books or articles. The common thread in‘these examples is conveying a public 
message or an idea through words or deeds. Law enforcement activity that diminishes a 
person’s ability to communicate'in any of these ways may interfere with his or her freedom 
of speech—and thus may not be undertaken by the FBI solely for that purpose. 


(U) The line between constitutionally protected speech and advocacy of violence or of 
conduct that may lead to violence or other unlawful activity must be understood. In 
Brandenburg v. Ohio, 395 U.S. 444 ( 1969), the Supreme Court established.a two-part test to 
determine whether such speech is constitutionally protected: the government may not 
prohibit advocacy-of-force or violence-except when stich-advocacy-(i)-is-intended to incite 
imminent lawless action, and (ii) is ‘likely to do so. Therefore, even heated rhetoric or 
offensive provocation that could conceivably lead to a violent response in the future is 
usually protected. Suppose, for example, a politically active group advocates on its web site 

_ taking unspecified “action” against persons or entities it views as the enemy, who thereafter 
suffer property damage and/or personal injury. Under the Brandenburg two-part test, the 
missing specificity and imminence in the message may provide it constitutional protection. 
For that reason, law enforcement may take no action that, in effect, blocks the message or 
punishes its sponsors. f 


(U) Despite the high standard for prohibiting free speech or punishing those who engage in it 
the law does not preclude FBI employees from observing and collecting any of the forms of 
protected speech and considering its content—as long as those activities are done for.a valid 
law enforcement or national security purpose and conducted in a manner that does not unduly 
infringe upon the ability of the speaker to deliver his or her message. To be an authorized 
purpose, it must be one that is authorized’ by the AGG-Dom—i.e., to further.an FBI 
assessment, predicated investigation, or other authorized function such as providing 

~ assistance to other agencies. Furthermore, by following the “Standards for Initiating or 
Approving an Assessment or Prédicated Investigation” as contained in the DIOG, the FBI 
will ensure that there is a rational relationship between that authorized purpose and the 
protected speech such that a reasonable person with knowledge of the circumstances could 
understand why the information is being collected, i 


? 


(U) Returning to the-example posed above, because the group’s advocacy of action could be 
directly related by circumstance to property damage suffered by one of the group’s known 
targets, collecting the speech—although lawfully protected—can lawfully occur. Similarly, 
listening to the public talks by a religious leader, who is suspected of raising funds for a 
terrorist organization, may yield clues as to his motivation, plan of action, and/or hidden 
messages to his followers. FBI employees should not, therefore, avoid collecting First ` 
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Amendment protected speech if it is relevant to an authorized AGG-Dom purpose—as long 
as they do so in a manner that does not inhibit the delivery. of the message or the ability of the 
audience to hear it, and so long’as the method of collection is the. least intrusive means 
feasible to gather the relevant information. 


(Ù) In summary, during the course of lawful investigative activities, the FBI may lawfully 
collect, retain, and consider the content of constitutionally protected speech, so long as: (i) 
the collection:is logically related to an authorized investigative purpose; (ii) the-collection 
does not actually infringe on the ability of the speaker to deliver his or her message; and (iii) 
the method of collection is the least intrusive alternative feasible. 


. (U) Exercise of Religion. 


(U) Like the other First Amendment freedoms, the “free exercise of religion” clause is 
broader than commonly believed. First, it covers any form of worship of a deity—even forms 
that are commonly understood to be cults or fringe sects, as well as the right not to worship 
any deity. Second, protected religious exercise also extends to dress or food that is required 
by religious edict, attendance at a facility used for religious practice (no matter iow unlikely 
it appears to be intended for that purpose), observance of the Sabbath, raising money for 
evangelical or missionary purposes, and proselytizing. Even in controlled environments like 
‘prisons, religious exercise must be permitted—subject to reasonable restrictions as to time, 
place, and manner. Another feature-of this First Amendment right is that it is a matter of 
heightened sensitivity to some Americans—especially to devout followers. For this reason, it 
is a matter that is more likely to provoke an adverse reaction, if the right is violated— 
regardless of which religion is involved. Therefore, when essential investigative activity may 
impact this right, it must be conducted in a manner that avoids the actual—and the 
appearance of—interference with religious practice to the maximum extent possible. 


(U) While there must-be an authorized purpose for any investigative activity that could have 
an impact on religious practice, this does not mean religious practitioners or religious , 
facilities are completely free from being examined as part of an assessment or predicated 
investigation. If such practitioners are involved in—or such facilities are used for—activities 
that are the proper subject of F Bl-authorized ‘investigative or intelligence collection activities, 
their religious affiliation does not “immunize” them to any degree from these efforts. It is 
paramount, however, that the authorized purpose of such efforts be properly documented. It 
is also important that investigative activity directed at religious leaders or at conduct 
occurring within religious facilities be focused in time and manner so as not to infringe on 
legitimate religious practice by any individual but especially by those who appear 
unconnected to the activities under investigation. 


(U) Furthermore, FBI employees may take appropriate cognizance of the role religion may 
play:in the membership or motivation of a criminal or terrorism enterprise. If, for example, 
affiliation with a certain religious institution or a specific religious sect is a known 
requirement for inclusion in a violent organization that is the subject of an investigation, then 
whether a person of interest is a member of that institution or sect.is a rational and 
permissible consideration. Similarly, if investigative experience and reliable intelligence 
reveal that members of a terrorist or criminal organization are known to commonly possess 
or exhibit a combination of religion-based characteristics or practices (e.g., group leaders 
state that acts of terrorism are based in religious doctrine), it is rational and lawful to consider 
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Such a combination in gathering intelligence about the group—even if any one of these, by 
itself, would constitute an impermissible consideration. By contrast, solely because prior 
subjects of an investigation of a particular group were members of a certain religion and they _ 
claimed a religious motivation for their acts of crime or terrorism, other members’ mere 
affiliation with that religion, by itself, is not a basis to assess or investigate—absent a known 
and direct connection to the threat under assessment or investigation. Finally, the absence of 

a particular religious affiliation can be used by analysts and investigators to eliminate certain. 
individuals from further investigative.consideration in those scenarios where religious 
affiliation-is relevant. i ` j 


. -(U) Freedom of the Press 


(U) Contrary to what many believe, this well-known First Amendment right is not owned by 
the news media; it is a right of the American people. The drafters of the Constitution believed 
that a free press was essential to preserving democracy. Although the news media typically 
seeks to enforce this right, freedom of the press should not be viewed as a contest between 
law enforcement or national security, on the one hand, and the interests of news media, on 
the other. ` 


(U) Freedom of the. press includes such matters as reasonable access to news-making ‘events, 
the-making of documentaries, and-the posting of “blogs:” The news gathering function is the 
aspect of freedom ofthe press most likely to intersect with law enforcement and national 
security investigative activities. Within that category, the interest of the news media in 
protecting confidential sources and the interest of agencies like the FBI in gaining access to 
these sources who may have evidence of a crime or national security intelligence often clash. 
The seminal case in this area is Branzburg v. Hayes, 408 U.S. 665 ( 1977), in-which the 
Supréme Court held that freedom of the press does not entitle a news reporter to refuse to 
divulge the identity of his source to a federal grand jury. The Court reasoned that, as long as 
the purpose-of law enforcement is not harassment or vindictiveness against the press, any 
harm to the news gathering function of the press (by revealing source identity) is outweighed 
by the need of the grand jury to gather evidence of crime. - š 


(U) Partially in response to Branzburg, the Attorney General has issued regulations that 
govern the issuance of subpoenas for reporter’s testimony and telephone toll records, the 
arrest of a reporter for a crime related to news gathering, and the interview of a reporter as a 
suspect in a crime arising from the news gathering process. In addition, an investigation of a 
member of the news média in his official capacity, the use of a reporter as a source, and 

posing as a member of the news media are’all sensitive circumstances in the AGG-Dom and 
other applicable AG guidelines. - 


(U) These regulations are-not intended to insulate reporters and other news media from FBI 
assessments or predicated investigations. They are intended to ensure that investigative 
activity that seeks information from or otherwise. involves membéers of the news media: is 
appropriately authorized; is necessary for an important law enforcement or national security 
Objective; is the least intrusive means to obtain the information or achieve the goals; and does 


not unduly infringe upon the news gathering aspect of the constitutional right to freedom of 
the press. i 
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D. (U).Freedom of Peaceful Assembly and to Petition the Government for Redress of 
Grievances ` i 


(U) Freedom of peaceful assembly, often called the right to freedom of association, present 
unique issues for law enforcement agencies, including the FBI. Individuals who gather with 
others to protest government action, or to rally or demonstrate in favor of,-or in Opposition to, 
a. social cause sometimes present a threat to public safety either by their numbers, by their 

` actions, by the anticipated response to their message, or by creating an opportunity for- 

` individuals or other groups with an unlawful purpose to infiltrate and compromise the 

legitimacy of the group for their own ends. The right to peaceful assembly includes more 
than just public demonstrations—it includes, as well, the posting of group web sites on the 
Internet, recruiting others to a cause, marketing a message, and fund raising. All are protected 


First Amendment activities if they arẹ conducted in support of the organization or political, 
religious or social cause. : 


(U) The right to petition the government for redress of grievances is so linked to peaceful 
assembly and association that it is included in this discussion. A distinction between the two 
is that an individual may exercise the right to petition the government by himself whereas 
assembly necessarily involves others. The right to.petition the government: includes writing. 
letters to Congress, carrying a placard outside city hall that delivers a political message, 


recruiting others to one’s cause, and lobbying Congress or an executive agency fora 
particular result. , - 


(U) For the FBI, covert presence or action within.associations, also called “undisclosed 


participation,” has the greatestpotential to impact this Constitutional right. The Supreme 


Court addressed this issue as a result of civil litigation arising from one of the many protests 


against the Vietnam War. In Laird v. Tatum, 408 U.S. 1 (1972), the Court found that the 
mere existence of an investigative program—consisting of covert physical surveillance in: 
public areas, infiltration of public assemblies by government operatives or sources, and the 
collection of néws articles and other publicly available information—for the purpose of 
determining the existence and scope of a domestic threat to national security does not, by 
itself, violate the First Amendment rights of the members of the assemblies.. The subjective: 
“chill” to the right to assembly, based on the suspected presence of government operatives, 
did not by itself give-rise to legal “standing” to ‘argue. that their constitutional rights had been 


abridged. Instead, the Court required a showing that the complained-of government action © 
would reasonably deter the exercise of that right. 





(U) Since Laird v. Tatum was decided, the lower courts ha 

on many occasions to determine whether it gave rise to a“ 

deterrent.” The basic standing requirement establish by Laird remains unchanged today. The 
* Tower courts,-however, have often imposed a very low threshold of objective harn to survive 

dismissal of the case. For example, plaintiffs who have-shown a loss of membership in an 
organization, loss of financial support, loss to réputation and status in the comimunity, and 
loss of employment by members have been granted standing to sue. 


(U) More significant 
of investigative activ 
have held the-followi 
Amendment analysis 





ve examined government activity 
subjective chill” or an “objective 


for the FBI than the standing issue has béen the lower courts’ evaluation 
ity into First Amendment protected. associations since Laird. The courts 

ng investigative activities to be constitutionally permissible under First 
: undercover participation in group activities; physical and video 
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surveillance in public areas; properly authorized electronic surveillance; recruitment and 
operation of sources; collection of information from government, public, and private sources 
(with consent); and the dissemination of information for a valid law enforcement purpose. 
However, these decisions were not reached in the abstract. In every case in which the courts 
have found government action to be proper, the government proved that it was conducted for 
an authorized law enforcement or national Security purpose and that it was conducted in 
substantial compliance with controlling regulations. In addition, in approving. these 
techniques, the courts have ofteri considered whether a less intrusive technique was available 
to the agency, and the courts have balanced the degree of intrusion or impact against the 
importance of the law enforcement or national security objective. 


(U) By contrast, since Laird, the courts have found these techniques to be legally 
objectionable: initiating an investigation solely on the basis of the groups’ social or political 
agenda (even if the agenda made the group susceptible to subversive infiltration); sabotaging 
or neutralizing the group’s legitimate social or political agenda; disparaging the group’s 
reputation-or standing; leading the group into criminal activity that otherwise probably would 
not have occurred; and undermining legitimate recruiting or funding efforts. In every such 
case, the court found the government’s purpose cither was not persuasive, was too remote, or 
was too speculative to justify the intrusion and the potential harm to the exercise of First 
Amendment rights. 





(U) Once again, the message is clear that investigative activity that involves assemblies or 
associations of United States persons exercising their First Amendment rights must-have an 
authorized purpose under the AGG-Dom—and one to which the information sought and the 
technique to be employed are rationally related. Less intrusive techniques should always be 
explored first and those authorizing such activity (which, as discussed above, will almost 
always constitute a sensitive investigative matter) should ensure that the investigative activity 
‘is focused as narrowly as feasible and that the purpose is thoroughly documented. 


4.3. (U) Equal Protection under the Law 
. (U) Introduction l 


(U) The Equal Protection Clause of the. United States Constitution providės in part that: “No , 
State shall make or enforce any law which šhall . . . deńy to any person within its jurisdiction. 
the equal protection of the laws.” The Supreme Court and the lower courts have made it clear 
that it applies as well to the official acts of United States government law enforcement 
agents.” Specifically, government employees are prohibited from engaging in invidious 
‘discrimination against individuals on the basis of race, ethnicity, national origin, or religious 
affiliation. This principle is further reflected and implemented for federal law enforcement in 


the, United States Department of Justice’s Guidance Regarding the Use of Race by Federal _ 
Law Enforcement Agencies (hereinafter “DOJ Guidance”). 


(U) The DOJ Guidance states.that investigative and intelligence collection activities must not 
be based solely on race, ethnicity, national origin, or religious affiliation. Any such activities 
that are based solely on such considerations are invidious by definition, therefore, 


eC eee 


F.3d 612 (7th Cir. 2001). 





1 See, e.g., Whren v. United States, 517 U.S. 806 (1996); see also Chavez v. lilinois State Police, 254 
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unconstitutional. This standard applies to all investigative and collection activity, including 
collecting and retaining information, opening cases, disseminating information, and indicting 
and prosecuting defendants. It is particularly.applicable to the retention and dissemination of 
personally identifying information about an individual—as further illustrated in the examples 
enumerated below. 


(U) The constitutional prohibition against invidious discriniination based on race, ethnicity, 
national origin or religion is relevant to both the-national security and criminal investigative 
programs of the FBI. National Security investigations often have ethnic aspects; members of 

a foreign terrorist organization may be primarily or exclusively from a particular country or 
area of the world. Similarly, ethnic heritage is frequently the common thread running through . 
violent gangs or other criminal organizations. It should be-noted that this is neither a new nor 
isolated phenomenon. Ethnic commonality among criminal and terrorist groups has been 
relatively constant and widespread.across many ethnicities throughout the history of the FBI. 


. (U) Policy Principles 


(U) To ensure that assessment and investigative activities and strategies consider racial, 
_ethnic, national. origin and religious factors properly and.effectively and to help assure the 
American public that the FBI does not engage in invidious discrimination, the following 

policy pririciples are established. 


1. (U) The prohibition against investigative activity based solely on race or ethnicity is not 
avoided by considering it in combination with other prohibited factors. For example, a 
person of a certain race engaging in lawful public speech about his religious 
convictions is not a proper subject of investigative activity based solely on any one of 
these factors—or by the combination of all three. Before collecting and using this 
information, a well-founded and authorized investigative purpose must exist as to 
which any or all of these otherwise prohibited factors is relevant: 


2. (U) When race or ethnicity is a relevant factor to consider, it should not be the 
dominant or primary factor. Adherence to this standard will not only ensure that it is 
never the sole factor—it will also preclude undue and unsound reliance on race or 

. ethnicity in investigative analysis. It reflects the recognition that there are thousands 
and, in some cases, millions of law abiding people in American society of the same race 
or ethnicity as those who are the subjects of FBI investigative. activity, and it guards 
against the risk of sweeping some of them into the net of suspicion without a sound 
investigative basis. 


3. (U) The FBI will-not collect or use behavior or characteristics;common to particular 
racial.or ethnic community as investigative factors unless they bear clear and specific 
relevance to a matter under assessment or investigation. This policy is intended to 
prevent the potential that collecting ethnic characteristics or behavior will inadvertently 
jead to individual identification based solely on such matters,.as well as to avoid the 
appearance that the FBI is engaged in ethnic or racial profiling. 
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C. (U) Guidance on the Use of Race and Ethnic Identity in Assessments aiid Predicated 
Investigations 


(U) Considering the reality of common ethnicity or race.among many criminal and terrorist 
groups, some question how the prohibition against racial or ethnic profiling is to be 
effectively applied—and not violated—in FBI assessments and predicated investigations. 
The question arises generally in two contexts: (i) with respect to an individual.or a group of 
individuals; and (ii) with respect to ethnic or racial communities as a whole. 


1. (U) Individual Race or Ethnicity as a Factor 


(U) The DOJ Guidance permits the consideration of ethnic and racial identity information 
based on specific reporting—such as from an eyewitness. As a general rule, race or- 
ethnicity as an identifying feature of a suspected perpetrator, subject, and in some cases, a. 
victim, is relevant if it is based on reliable evidence-or information—not conjecture or 
stereotyped assumptions. In addition, the DOJ Guidance permits consideration of race or 
ethnicity in other investigative or collection scenarios if it is relevant. These examples 
illustrate: i 


a. (U) The race or ethnicity of suspected members, associates, or supporters of an 
ethnic-based gang or criminal enterprise may be collected and retdined when 
gathering information about or investigating the organization. 


b. (U) Ethnicity may be considered in evaluating whether a subject is—or is not—a 

` possible-associate of a criminal or terrorist group that is known to be comprised of 
members of the same ethnic grouping—as long as it is not the dominant factor for 
focusing on a. particular person. It is axiomatic that there are many members of the 
same ethnic group who are not members of the group; and for that reason, there must 
be other information beyond race or ethnicity that links the individual to the terrorist 
or criminal group or to the other members of the group. Otherwise, racial or ethnic 
identity would be the sole criterion, and that is impermissible; 


2. (U) Soa Race or Ethnicity as a Factor 


a. (U) Collecting ; and analyzing. demographics. The DOJ guidance and FBI policy 
permit the FBI to identify locations of concentrated ethnic. communities in the Field 
Office’s domain, if these locations will reasonably aid the analysis of potential threats ` 
and vulnerabilities, and, overall, assist domain awareness for the purpose of 
performing intelligence analysis. If, for example, intelligence reporting reveals that 
members of certain terrorist organizations live and operate primarily within a certain 
concentrated community of the same ethnicity, the location of that community is 
clearly valuable—and properly collectible—data, Similarly, the locations of ethnic- ° 

e oriented businesses: and other facilities may be collected if their locations will 
reasonably contribute to an awaréness.of threats.and vulnerabilities, and intelligence 
collection opportunities. Also, members of some communities may be potential 
victims of civil rights crimes and, for this reason, community location niay aid 
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enforcement of civil rights laws. Information about such communities should fot be 
collected, however, unless the communities are sufficiently concentrated and 
established so as to provide a reasonable potential for intelligence collection that 
would support FBI mission programs (e.g., where identified terrorist subjects from 
certain countries may relocate to blend in and avoid detection). 


b2 
b7E 





c. (U) General sthiichrasial behavior. The authority to collect ethnic community 
location information does not extend tothe collection of cultural and behavioral 
information about an ethnic community that bears no.rational relationship to a valid 
investigative or analytical need. Every ethnic community in the Nation that has been 
associated with a criminal or national security threat has a dominant majority. of law- 
abiding citizens, resident aliens, and visitors who may share common ethnic behavior 
but who have no connection to crime or terrorism (as either subjects or victims). For 
this reason, a broad-brush collection of racial or ethnic characteristics or behavior is. 
not helpful to achieve any authorized FBI purpose and may create the appearance of 
improper racial or ethnic profiling. 


(U) Specific and relevant ethnic behavior. On the other hand, knowing the 
behavioral and life style characteristics of known individuals:who are criminals or 
who pose a threat to national security may logically aid in the detection and 
prevention of crime and threats to the national security within the community.and 
beyond. Focused behavioral characteristics reasonably believed to be associated with 
a particular criminal or terrorist element of an ethnic community (not with the 
community as a whole) may be collected and retained. For example, if it is known 
through intelligence analysis or otherwise that individuals associated with an ethnic- 
based terrorist or criminal group conduct their finances by certain methods, travel ‘ina 
certain manner, work in certain jobs, or come from a certain part of their home 
country that has established links to terrorism, those are relevant factors to consider 
when investigating the group or assessing whether it may have a presence within a: 
community. It is recognizéd that the “fit” between specific behavioral characteristics 
and a terrorist or criminal! group ‘is unlikely to be perfect—that is, there will be 
members of the group who do not exhibit the behavioral criteria as well as persons 
who exhibit the behaviors who are not members of the group. Nevertheless, in order 
to maximize FBI mission relevance and to minimize the appearance of racial or 
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ethnic profiling, the criteria used to identify members of the group within the larger 
ethnic community to which they belong must be as focused and as narrow as 
intelligence reporting and other circumstances permit. If intelligence reporting is 
insufficiently exact so that it is reasonable to believe that the criteria will-include an 
unreasonable number of people who are not involved, then it would be inappropriate 
to use the behiaviors, standing-alone, as the basis for FBI activity. 


(U) Exploitive ethnic behavior. A related category of information that can be collected 
is behavioral and cultural information about ethnic or racial communities that is 
reasonably likely to be exploited by criminal or terrorist.groups who hide within those 
communities in order to engage in illicit activities undetected. For example, thé existence 
of a cultural tradition of collecting funds from members within the community to:fund 
charitable causes in their-homeland at a certain time of the ‘year (and how that is 
accomplished) would be relevant if intelligence reporting revealed that, unknown to 
many donors, the charitable causes were fronts for terrorist organizations or that terrorist 
supporters within the community intended to exploit the unwitting donors for their own 
purposes. 


4.4. (U) Least Intrusive Method ; 
A. (U) Overview 


(U) The AGG-Dom requires that the "least intrusive" means or method be considered 
and—if operationally sound and effective—used to obtain intelligence or evidence in lieu 
of a more intrusive method. This-principle is also reflected in Executive Order 12333 
which governs the activities of the United States intelligence community. The concept of 
least intrisive method applies to the collection of all intelligence and evidence. Regarding 
the collection of foreign intelligence e that is not collected as part-of the FBI’s traditional 
national security or criminal missions, the AGG-Dom provides that open and overt 
collection activity must be used with United States persons if feasible. 





(U) By emphasizing the use of the least intrusive means to obtain intelligence and evidence 
FBI employees can effectively execute their duties while mitigating potential negative 
impacts on the privacy and civil liberties of all people encompassed within the 
‘investigation, including targets, witnesses, and victims. This principle is not intended to 
discourage FBI employees from seeking relevant and necessary intelligencé, information, 
or evidence, but rather is intended to encourage investigators to choose the least intrusive— 
but still effective—means from the available options,to obtain the:material. 


(U) This principle is embodied in statutes and DOJ policies on a variety of topics including 
electronic surveillance, the use of tracking devices, the temporary detention of suspects, 
and forfeiture. In addition, the concept of least intrusive method.can be found in case law 
as a factor to be considered in assessing the reasonableness of an investigative method in 
the face of a First Amendment or due process violation claim. See Clark v. Library of 
Congress, 750 F:2d 89, 94 (D.C. Cir 1984); Alliance to End Repression v. City of Chicago, 


627 F. Supp. 1044, 1055 (N.D. Ill. 1985), citing Elrod v. Burns, 427 U.S. 347, 362-3 
(1976). 
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. (U) General Approach to Least Intrusive Method Concept 


(U) Applying the concept of least intrusive method to an investigative or intelligence 
collection scenario is both a logical process and an exercise in judgment. It is logical in the 
sense that the FBI employee must first determine the relative intrusiveness of the method 
that would provide information: 


1. (U) Relevant to the assessment or predicated investigation; 
2. (U) Within the time frame required by the assessment or predicated investigation; 


3. (U) Consistent with operational security and the protection of sensitive sources and 
methods; and: 


4. (U) Ina manner that provides confidence in.the accuracy of the information. 


(U).Determining the least intrusive method also requirés sound judgment because it is clear 
that the factors discussed above are-not fixed points on a checklist: They require careful 
consideration based on a thorough understanding of investigative objectives and 
circumstances. 


. (U) Determining Intrusiveness- 


(U) In determining intrusiveness, the primary factor should be the degree of procedural 
protection that established law and:the AGG-Dom provide for the use of the method. Using 
this factor, search warrants, wiretaps, and undercover operations are very intrusive. By 
contrast, investigative methods with limited procedural requirements, such as checks of 
government and commercial data-bases and communication with established sources, are 
less intrusive. 


(U) The following guidance is: desigried to assist FBI personnel in judging:the relative- 
intrusiveness of different methods: 


1. (U) Nature of the information sought: Investigative objectives generally dictate the 
type of information required and from whom it should be collected. This subpart is not 
intended to.address the situation where the type of information needed and its location 
are-clear so that consideration of alternatives would be pointless. When the option 
exists, however, to seek information from any of a-variety of places, it is less intrusive 
to seek information from less sensitive and less protected places. Similarly, obtaining 
information that is protected by-a statutory scheme (e.g., financial records) or an 
evidentiary privilege (e.g., attorney/client communications) is more intrusive than 
obtaining information that is not so protected. In addition, if there exists a reasonable 
‘expectation of privacy under the Fourth Amendment (i.e., private communications), 
obtaining that information is moré intrusive than obtaining information that is 
knowingly exposed to public view.as to which there is no reasonable expectation of 
privacy. — > : 


2. (U) Scope of the information sought: Collecting information regarding-an isolated 
event—such as a certain phone number called on a spécific date or a single financial 
transaction—is less intrusive or invasive of an individual's privacy than collecting a 
complete communications or financial "profile." Similarly, a complete credit history is. 
a more intrusive view into an individual's life than a few isolated credit charges. In 
some cases, a complete financial and credit profile is exactly what the investigation 
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requires (for example, investigations of terrorist financing or money laundering). If so, 
FBI employees should not hesitate to use appropriate legal process to obtain such 
information if the predicate requirements are satisfied. It is also recognized that 
operational security—such as source protection—may dictate seeking a wider scope of 
information than is absolutely necessary for the purpose of protecting a specific target 
or source. When doing so, however, the concept of least intrusive alternative still 
applies. The FBI may obtain-more data than strictly needed, but it should obtain no 
more data than is needed to accomplish the operational :security goal. 


. (U) Scope of the use of the method: Using a method in a manner that captures a 
greater picture of an individual's or a group's activities is more intrusive than using the 
same method or a different one that is focused in time and location to a specific 
objective. For example, it.is less intrusive to use a tracking device to verify point-to- 
point travel than it is to use the same device to track an individual's movements over a 
sustained period of time. Sustained tracking on public highways would be just as lawful 
but more intrusive because it captures a greater portion of an individual's daily 
movements. Similarly, surveillance by closed circuit television that checks a discrete 
location within a discrete time frame is léss intrusive than 24/7 coverage of a wider area. 
For another example, a computer intrusion device that captures only host computer 
identification information is far less intrusive than oné that captiires file content. 
(U):Source of the information sought: It is less intrusive to obtain information from 
existing government sources (such as state, local, tribal, international, or federal 
partners) or from publicly-available data:in commercial data bases, than to obtain the 
same information from a third party (usually through legal process) that has a ` 
confidential relationship with the subject—such as a financial or academic institution. 
Similarly, obtaining information from a reliable confidential source whois lawfully in 
possession of the information and lawfully entitled to disclose it (such as obtaining an 
address from an employee of a local utility company) is less-intrusive than ‘obtaining 
the information from an entity with a.confidential relationship with the subject. It is 
recognized ‘in this category that the accuracy and procedural reliability of the 
information sought is an important factor in choosing the source of the information. For 
example, even if the information is available from a confidential source, a grand jury 
subpoena, national ‘security letter (NSL), ex parte order, or other process may be 
required in order to ensure informational integrity. . 


(U) The risk of public exposure: Seeking information about an individual or group i 
under circumstances that create a risk that the contact itself and the information sought 
will be exposed to the individual's or group's detriment and/or embarrassment— 
particularly if the method used carries no legal obligation to maintain silence—is more 
intrusive than information gathering that does not carry that risk. Interviews with 
employers, neighbors, and associates, for example, or the issuance of grand jury 
subpoenas at a time when the investigation has not yet been publicly exposed are moré 
intrusive than methods that gather information covertly. Similarly, interviews of a 
subject in a discrete location would be less intrusive than an interview at, for example, a 
place of employment or other location where the subject is known. 


(U) There is a limit to the utility of this list of intrusiveness factors. Some factors may be 





‘inapplicable in a given investigation and, in many cases, the choice and scope of the 
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method will be dictated wholly by investigative objectives and circumstances. The 
foregoing is not intended to provide a comprehensive checklist or even an overall 
continuum of intrusiveness. It is intended instead to identify the factors involved in a 
determination of intrusiveness and to attune FBI employees to select, within each 
applicable category, a less intrusive method if operational circumstances permit. In the end, 
selecting the least intrusive method that will accomplish the objective is a matter of sound 
judgmént. In exercising such judgment, however, consideration of these factors should . 
ensure that the decision to proceed is well founded. 


. (U) Standard for Balancing Intrusion and Investigative Requirements 


(U) Once an appropriate method and its deployment have been. determined, reviewing and 
approving authorities should balance the level of intrusion against investigative 
requirements. This balancing testis particularly important when the information sought 
involves clearly established constitutional, statutory, or evidentiary rights or sensitive 
circumstances (such as obtaining information from religious. or academic institutions or 
public fora where First Amendment rights are being exercised), but should be applied in all 
circumstances to ensure that the least intrusive alternative feasible is being utilized. 


(U) Balancing the factors discussed above with the considerations discussed below will 
help determine whether the method and the extent to which it intrudes into privacy or 
threatens civil liberties is a to the significance of the case and the information 
sought. 


-_ (U) Considerations on the investigative side of the balancing scale include the: 
(U) Seriousness of the crime or national security threat; 
2. (U) Strength and significance of the intelligence/information to be gained; 


3. (U) Amount of information already known about the subject or group under 
investigation; and 


4. (U).Requirements of operational security, including protection of sources and methods. 


(U) If, fot example, the threat is remote, the individual's involvement is speculative, and the 

. probability of obtaining probative information is low, intrusive methods may not be 
justified, i.e., they may do more harm than good. At the other end of the scale, if the threat 
is significant and possibly imminent (e.g., a bomb threat), aggressive measures would be 
appropriate regardless of intrusiveness. 


(U) In addition, with respect to the investigation of a group, if the terrorist or criminal 
nature of the group and its membership is well established (e.g., al Qaeda, Ku Klux Klan, 
Colombo Family of La Cosa Nostra), there is less concern that pure First Amendment 
activity is at stake than there would be for a group whose true character is not yet known 
(e.g., an Islamic charity suspected of terrorist funding) or many of whose members appear 
to be solely exercising First Amendment rights (anti-war protestors suspected of being 
infiltrated by violent anarchists). This is not to suggest that investigators should be less 
aggressive in determining the true nature of an unknown group, which may be engaged in 
terrorism or other violent crime. Indeed, a more aggressive and timely approach may be in 
order to determine whether the group is violent or to eliminate it as a threat. Nevertheless, 
when First Amendment rights are at stake, the choice and ‘use of investigative methods: 
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should be focused in a manner that minimizes potential infringement of those rights. 
Finally, as the investigation progresses and the subject's or group's involvement becomes 
clear, more intrusive methods may be justified. Conversely, if reliable information emerges 
refuting the individual's involvement or the group's criminal or terrorism connections, the 
use of any investigative methods must be carefully evaluated. 


(U) Another consideration. to be balanced is operational security. Is it likely that if a less 
intrusive but feasible method were selected, the subject would detect its use and alter his 
activities—including his means of communication—to thwart the success of the operation. 
Operational security—particularly in national security investigations—should not be 
undervalued and may, by itself, justify covert tactics which, under other circumstances, 
would not be the least intrusive. 


. (U) Conclusion 


(U) The foregoing guidance is offered to.assist FBI employees in navigating the often 
unclear course to select the least intrusive investigative method that effectively 
accomplishes the operational objective at hand. In the final analysis, the choice of method 
and balancing of the impact on privacy and civil liberties with operational needs is a matter 
of judgment, based on training and experience. Pursuant to the AGG-Dom, other applicable 
laws and policies, and this guidance; FBI employees may use any: lawful-method, allowed, 
even if intrusive, where the intrusiveness is warranted by the threat to the national security 
or to potential victims of crime and/or the strength of the information indicating its 
existence. 
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5. (U) Assessments 


5.1. (U) Overview 


(U//FOUO) The Attorney General’s Guidelines for Domestic FBI Operations (AGG-Dom) 
combine “threat assessments” under the former Attorney General’s Guidelines for FBI National 

` Security Investigations and Foreign Intelligence Collection and the “prompt and extremely 
limited checking out of initial leads” under the former Attorney General’s Guidelines on General 
Crimes, Racketeering Enterprise and Terrorism Enterprise Investigations into a new - 
investigative category entitled “assessments.” All assessments must either be opened in an 


investig placed in aL] b2 


Guardian]), or placed b7E 






(U//FOUO) Note: In the DIOG, the word “assessment” has two distinct meanings.. The AGG- 
Dom authorizes as an investigative activity an “assessment” which requires an authorized 
purpose as discussed in this section of the DIOG. The USIC, however, also uses the word 
“assessment” to describe written intelligence products, as discussed in DIOG Section 15.7.B. 


-(U) Assessments authorized under the AGG-Dom do-not require’a particular factual-predication - - 
but do require an authorized purpose. Assessments may be carried out to detect, obtain 

information about, or prevent or protect against federal crimes or threats to the national security 

or to collect foreign intelligence. (AGG-Dom, Part II and Part IJ.A) 


(U//FOUO) Although “no particular factual predication” is required, the basis of an assessment 
cannot be arbitrary or groundless speculation, nor can an assessment be.based.solely on the _ 
exercise of First Amendment protected activities or on the race, ethnicity, national origin or 
religion of the subject. Although difficult to define, “no particular factual predication” is less 
than “information or allegation” as required for the initiation of a preliminary investigation. For 
example, an assessment may be conducted when there is a basis to know: (i) whether more 
information or facts are required to determine if there is a criminal or national security threat; 
and (ii).there is a rational and articulable relationship between the stated authorized purpose of 
the assessment on the one hand and the information sought and the proposed means to obtain that 
information on the other, Regardless of whether specific approval or specific documentation is 
required, an FBI employee should be able to explain the purpose of an assessment and the reason 
for the methods used to conduct the assessment. Those FBI employees who conduct assessments 
are responsible for assuring that assessments are.not pursued for frivolous or improper purposes 
and are not based solely on First Amendment activity or on the race, ethnicity, national origin, or 
religion of the subject of the assessment. (AGG-Dom, Part IT) 


(U//FOUO) An FBI employee can search historical information already contained within: (i) FBI 
data systems; (ii) United States Intelligence Community (USIC) system j 
employee has access (e:g.. 


b2 
b7E 










;-(ili) any other United States Government database to 
which an FBI employee has access; and (iv) the FBI employee can also conduct open-source 
Internet searches without initiating-an assessment (open-source Internet searches do not include 
any paid-for-service databases such as Lexis-Nexis and Choicepoint), as further discussed in 
Section 5.6.A.1 and Section 15. The use of such paid-for-service databases requires the initiation. 
of an assessment or predicated investigation. This allows the FBI employee to possibly resolve a 
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matter without the need to conduct new investigative activity and open an assessment. 
Additionally, through analysis of existing information, the FBI employee may produce products 
that include, but are not limited to. an Intelligence Assessment, Intelligence Bulletin and 
If, while conducting analysis, the FBI employee finds a gap 
in intelligence that is relevant to an authorized FBI activity, the FBI employee can identify the - b2 


ap for possible development of a “collection requirerment.” The applicable. __| b7E 
(or other[_ as directed in the DI- PG) must be used to ... 


document this analysis. See the Directorate of Intelligence (DI) PG for file classification 
guidance. i 


5.2. (U)Purpose and Scope ` 


(U//FOUO) The FBI cannot be content to wait for leads to come in through the actions of others; 
rather, we must be vigilant in detecting criminal or national security threats to the full extent 
permitted by law, with an eye towards early intervention and prevention of criminal or national 
security incidents before they occur. For example, to carry out its central mission of protecting 
the national security, the FBI must proactively collect information from available sources in: 
order to identify threats and activities and to inform appropriate intelligence analysis. Collection 
required to inform such analysis will appear as FBI National Collection Requirements and FBI 
Field-Office-Gollection-Requirements: Likewise, in the exercise of its protective-functions; the 
FBI is not constrained to wait until information is received indicating that a particular event, 
activity or facility has drawn the attention of would-be perpetrators of terrorism, The proactive 
authority conveyed to the FBI is designed for, and may be used by, the FBI in the discharge of 
these responsibilities. The FBI may also conduct assessments as part of its special events 
management responsibilities. (AGG-Dom, Part II) 


(U) More broadly, detecting and interrupting criminal activities at their early stages, and. 
preventing crimes from occurring in the first place, is preferable to allowing criminal plots to 
come to fruition. Hence, asséssments may also:be undertaken proactively with such objectivés'as 
detecting criminal activities; obtaining information on individuals, groups, or organizations of 
possible investigative interest, either because they may be involved in criminal or national 
security-threatening activities or because they may be targeted for attack or victimization in such 
activities; and identifying and assessing individuals who may have value as confidential human 
sources. (AGG-Dom, Part.II): ` 


(U//FOUO) As described in the below-scenarios, assessments may be used when an “allegation 
or information” or an “articulable factual basis” (the predicates for predicated investigations) 
concerning crimes or threats to the national security is obtained and the matter can be checked 
out or resolved through the relatively non-intrusive methods authorized in assessments (usé of 
least intrusive means). The checking of investigative leads in this manner can avoid the need to 
proceed to more formal levels of investigative activity (predicated investigation), if.the results of 
an assessment indicate that-further investigation is not-warranted. (AGG-Dom, Part IT) 


Hypothetical fact-patterns are discussed below: 


A. FOYO] o aoo o ee 


b2 
b7E 
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(U/F ouo)L___]f he FBI employee can analyze historical information already 
contained within: (i) FBI data systems; (ii) USIC systems to which FBI employees have 
access (e.g ;. (iii) any other United States Government 
database to which an FBI employee has access; and (iv) can conduct open-source Internet 
searches without initiating an assessment. Open-source Internet searches do not include any 
paid-for-service databases such as Lexis-Nexis and-Choicepoint 





U/IFOUO 
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5.3. (U) Civil Liberties and Privacy 


(U) The. pursuit of legitimate goals-without infringing upon the exercise of constitutional 
freedoms is a challenge that the FBI meets through the application of sound judgment and 
discretion. In order to ensure that civil liberties are not undermined by the conduct of 
assessments, every assessment under this subsection must have an authorized purpose and an 
identified objective. The purpose and objective of the assessment must.be documented and 
retained as described in this section and in DIOG Section 14. i 


(U) Even when an authorized purpose is present, an assessment could create the appearance that 
it is directed at or activated by constitutionally protected activity, race, ethnicity, national origin 
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or.religion—particularly under circumstances where the link to an authorized FBI mission is not 
readily apparent. In these situations, it is-vitally important that the authorized purpose and the 
underlying reasons for conducting the assessment and engaging in the proposed methods are well 
documented. ` 


(U) No investigative activity, including assessments, may be taken solely on the-basis of 
activities that are protected by the First Amendment or onthe race, ethnicity, national origin or 
religion of the subject. If an assessment touches on or is partially motivated by First Amendment 
activities, race, ethnicity, national origin or religion, it is particularly important to identify and 
document the basis for the assessment with clarity. 


(U//FOUO) Example: Individuals or groups who communicate with each 
other or with members of the public in any form in pursuit of social or 
political causes—such: as opposing war or foreign policy, protesting 
government actions, promoting certain religious beliefs, -championing 
particular local, national, or international causes, or a change in government 
through non-criminal means, and actively recruit others to join their causes— 
have a fundamental constitutional right to do so. An assessment may not be 
initiated based solely on the exercise of these First Amendment rights. If, 
however, a group exercising: its First Amendment rights also threatens or 
advocates violence or destruction of property, an assessment would be 
appropriate. 


(U) The AGG-Dom require that the “least intrusive" means or method be considered and—if 
operationally sound and effective—used-in lieu of more intrusive methods to obtain intelligence 
` and/or evidence. This principle is also reflected in Executive Order 12333, which governs the 
activities of the USIC. Executive Order 12333 lays out the goals, directions, duties and 
responsibilities of the USIC. The concept of least intrusive means applies to the collection of all 
intelligence and evidence, not just that collected by those aspects of the FBI that are part of the 

. intelligence community. 


(U) By emphasizing the use of the least intrusive means to obtain intelligence and/or evidence, 
FBI employees can effectively execute their duties while mitigating the potential negative impact 
on the privacy and-civil liberties and the damage to the reputation of all people encompassed 
within the investigation or assessment, including targets, witnesses, and victims. This principle is 
not intended to discourage FBI employees from seeking relevant and necessary intelligence, 
information, or evidence, but rather is intended to encourage FBI employees to choose the least 
intrusive—but still effective —means from the available options.to obtain the information. 
(AGG-Dom, Part 1-C.2) i 


5.4. (U) Authorized Purposes (AGG-Dom, Part [1.A.2.—Authorized Activities) 
_ A. (U) Assessment Activities: During an assessment, the FBI may: 


1. (U) Seek information, proactively or in response to investigative leads, relatirig to 
activities constituting violations of federal criminal law or threats to the national security; 


2, (U) Seek information, proactively or in response to investigative leads, relating to the 
involvement or role of individuals, gtoups, or organizations relating to activities. 
constituting violations of federal criminal law or threats to:the national security; 


` 
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3. (U) Identify and obtain information about potential targets of or vulnerabilities to 
criminal activities in violation of federal-law or threats to the national security; 


4. (U) Obtain information to inform or facilitate intelligence analysis and planning (AGG- 
Dom, Part IV); 


5. (U) Seek information to identify potential human sources, assess the suitability, 
credibility, or value of individuals as human sources, validate human sources, or mairitain - 
the cover or credibility of human sources, who may be able to provide or obtain 
information relating to criminal activities in violation of federal law, threats to the 
national security, or matters of foreign intelligence interest; and 


6. (U) Seek.information, proactively or in response to investigative leads, relating to matters 
of foreign intelligence interest responsive to foreign intelligence requirements. - 


5.5. (U//FOUO) Standards for Initiating or Approving an Assessment 


(U//FOUO) Before initiating or. approving an assessment, an FB] employeé or approving official 
must determine whether: 


A. (U//FOUO) An authorized purpose and objective exists for the conduct of the assessment; 


B. (U//FOUO) The assessment is based on factors othér thari the exercise of First Amendmient 
activities or the,race, ethnicity, national origin or religion of the subject; and 


C. (U//FOUO) The assessment is an appropriate use of personnel and financial resources. 


5.6. (U) Duration, Approval, Notice, Documentation, File Review and Responsible 
Entity 


(U//FÓUO) FBIHQ and FBI Field Offices have the authority to conduct all assessment activities ` 
as authorized in Section 5.4. Field Office personnel and approving officials, as specified in the. 
DIOG Section 5.6.A.1-6, equate to the following FBIHQ personnel and approving officials when 
FBIHQ initiates, conducts,-or closes.an assessment: 


e (U//FOUO) Field Office Analyst or Special Agent (SA) = FBIHQ Analyst, SA, or 
Supervisory Special Agent (SSA); 


* (U//FOUO) Field Office Supervisory Intelligence Analysts (SIA) = FBIHQ SIA; 


e (U//FOUO) Chief Division Counsel (CDC) = FBIHQ Office of the General Counsel 
(OGC); 


* (U//FOUO]) Field Office SSA = FBIHQ Unit Chief (UC); and 
e (U//FOUO) Special Agent in Charge (SAC) = FBIHQ Section Chief (SC). 


A. (U//FQUO) Duration, Approval, Notice, Documentation, File Review and Responsible 
Entity: An FBI employee must document on the FD-71 or in Guardian the use of or the 
request and approval for the use of authorized investigative methods-in type 1 and 2 
assessments (see DIOG Section 5.6.A.1 and 2, below). By exception, certain assessment type 
1 and 2 situations may require the use of an electronic communication (EC) to document the 
use and approval of particular investigative methods. All type 3, 4, and 6 (see DIOG Section 
5.6.A.3.4. and 6, below) assessments and authorized investigative methods requiring 
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supervisory approval must use an EC to document the approval of the assessment and the 
request and approval for the use of an applicable investigative method. 


(U//FOUO) For type 5 assessment activities, an FBI employee must follow the duration, 
approval, and other requirements specified in the FBI’s Confidential Human Source Policy 
Manual (CHSPM), Confi dential Human Source Validation Standards Manual (CHSVSM), 

‘ney G li «ding the Use of FBI Confidential Human 
All type 5 assessment activities under this 
provision must be documented i unless otherwise directed in the DI PG or-other 
FBIHQ Division PGs. If there is any inconsistency between the CHSPM or CHSVSM and 
the DIOG, the DIOG controls and OGC should be immediately notified of the conflict. 


(U//FOUO) Listed below are the applicable duration, documentation, justification/file review, 
approval level; and responsible entity for each type of-assessment, described in DIOG 
Section 5.4 above. 














b2 
b7E 


. (U//FOUO) Seek information, proactively or in response. to investigative leads, 
_ relating to activities constituting violations of federal criminal law or threats to the 
national security (e.g., the prompt checking of leads on individuals or activity). 


(U//FOUO) Duration: There is no time requirement. for this type of assessment, but it is 
anticipated that such assessments will be relatively short. These assessments réquire 
recurring 30-day justification reviews 2 the SSA or-SIA as discussed below. 


b2 





. (U/FOUO) Approval: An FBI employee-may initiate an assessment under this 
sibuecioivitau amen ibogenwenl te ea 


Jan FD-71 or Guardian . ae 


b7E 


FD-71 
or Guardian. The initiation date for this type of assessment is the date the SSA or SIA 
assigns an FBI employee-to conduct the assessment. 


(U//F QUO) As soon as practicable following the determination that this type of 
assessment involves a sensitive investigative matter, the matter must be. brought to the 
CDC for review and: to the SAC for approval to. continue the assessment. The term 


b2 
b7E 





before using one or more of the following investigative: methods: physical surveillance, 
certain intèrviews, and tasking of'confidential human sources. In addition, as specified in 
the Division policy implementation guides (PG), there are agreements:(e.g., Memoranda 
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of Agreements/Understanding, Treaties) that may require particular coordination prior to 
the release/acquisition of federal, state, local, tribal, and foreign government information. 


(U//FOUO) Justification Review: If this type of assessment is not concluded within 30 

days, the SSA or SIA must conduct recurring 30-day justification reviews in accordance 

with Section 3.4. This justification review must: 

a. (U//FOUO) Evaluate the progress madé toward achieving thé authorized purpose and 
objective; 

b. (U//FOUO) Ensure activities that occurred during the prior 30 days were appropriate; 

c. (U//FOUO) Determine whether it is reasonably likely that information will be 
obtained that is relevant.to the authorized objective, thereby warranting an extension 
for another 30-days; 

d. (U//FOUO) Determine whether adequate predication has been developed to justify 
opening a criminal, counterterrorism, counterintelligence, cyber, or weapons of mass 
destruction predicated investigation; and 


e. (U//FOUO) Determine whether the assessment should be terminated. 


U//FQUQ) The FBI employee must-ensuré-that/ ___ TE I]. 

l fn the FD-71 ọr Guardian. The completed FD-71 or uardian 
requires supervisory approval before being uploaded. The FD-71 or Guardian must also 
document supervisory approval for the use of any investigative method that requires 
approval, such as: physical surveillance; certain interviews; or tasking of confidential 

- human sources (see DIOG Section 5.9). In addition, as specified in the Division PG, there 
are agreements (e.g., Memoranda of Agreements/Understanding, Treaties) that may 

require particular coordination prior to the -release/acquisition of federal, state, local, 

naland tareton 9 er) e 


maa S 












classification as described in Section 5.14. 
` (UI/FOUO) Responsiblé Entity: This type of assessment is conducted by the appropriate 


substantive Field Office Squad. 
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access, he/she can also. review.already existing data contained in any United States 
Government data system and search open source information on the Internet 


ae eel Open-source Internet searches do.not include any paid-for-  - 
service databases such as Lexis-Nexis and Choicepoint eee ee ee 
tet eee ee ee eee oe ee ae es 


database checks or open source Internét searches do not reveal any derogatory 
-information, the FBI employee may terminate this activity without opening an assessment 
or documenting these activities on an FD-71. i 


b2 
b7E 





eS 


2. (U//FOUO) Seek information, proactively or in response to investigative leads, 
relating to the involvement or role of individuals, groups, or organizations in 
activities constituting violations of federal criminal law or threats to the national 
security (e.g., the prompt checking of leads on groups or organizations). 


(U//FOUO) Duration: There is no time requirement for this type of assessment, but it is 
anticipated that such assessments will be relatively short. These assessments require 
‘recurring 30-day justification reviews by the’SSA or SIA as discussed below. 








or Guardian. The-initiation date for this type of assessment is the date the SSA or SIA 
assigns an FBI employee to conduct the assessment ` 


(U//FOUO) As soon as practicable following the determination that this type of 
assessment involves a sensitive investigative matter, the matter must be brought to the 
CDC for review and to the SAC for approval to continue the assessment. The term 
“sensitive investigative matter” is defined in Section 5.7 and Section 10. When 
completing the FD-71 or Guardian lead for an assessment involving a sensitive 
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b2 
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Higher supervisory approval, as described in Section 5.9 may be required before 
-using one or more of the following investigative methods: physical surveillance, certain 
interviews, and tasking of confidential human.sources. In addition, as specified in the 
Division PGs, there are agreements (¢.g., Memoranda of Agreements/Understanding, 
Treaties) that may require particular coordination prior to the release/acquisition of 
federal, state, local, tribal and foreign government information. s , 
(U//FOUO) Justification Review: If this type of assessment is not concluded within 30 
days, the SSA or SIA must conduct recurring 30-day justification reviews in accordance 
with Section 3.4. This justification review must: 
a. -(U//FOUO) Evaluate the progress made toward achieving the authorized purpose and 
objective; 
b. (U//FOQUO) Ensure activities that occurred during the prior 30 days were appropriate; 
c. (U//FOUO) Determine whether it is reasonably likely that information will be 
obtained that is relevant to the authorized objective, thereby warranting an extension 
for another 30-days; I 
d: (U//FOUO) Determine whether adéquate predication has-been: developed.to justify 
-peninga criminal, counterterrorism, counterintelligence, cyber, or weapons of mass 
. destruction predicated investigation; and 


e. (U//FOUO) Determine whether the assessment should be terminated. 


U//FOUO) The FBI employee must ehsure SS : 
É ; Jin the FD-71 or Guardian. The completed FD-71 or uardian 


requires supervisory approval before being uploaded. The FD-71 or Guardian must also b2 
document supervisory approval for the use of any investigative method that requires | DIB 
approval, ‘such as:-physical surveillance; certain interviews; or tasking of confidential 

humaii sources (see Section 5.9). In addition, as specified in the Division PGs, there are 

agreements (€.g., Memoranda of Agreements/Understanding, Treaties) that may require 

particular coordination prior to the release/acquisition of federal, state, local, tribal and 


foreign government information. 









(U//FOUO) Responsible Entity: This type of assessment is conducted by the appropriate 
substantive Field Office Squad. 


b2 
“ bI7E 
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3. (U) Identify and. obtain information about potential targets of.or vulnerabilities to 
criminal activities in violation of federal law or threats to the national security. 


(U//FOUO) Assessments in this section may include activities designed to collect 

information for domain analysis that is focused on identifying targets of or vulnerabilities 

to criminal conduct or threats to the national security. FBIHQ. directed National Domain 

Assessments must be coordinated in advance with the FBIHQ DI, Domain Management 

Section (DMS). See the DI PG for details: ` a 

(U//FOUO) This type of assessment may not be used for the purpose of collecting 

positive foreign intelligence, although such intelligence may be incidentally collected 

during this type of assessment, Positive foreign intelligence can only be. collected 

pursuant to Section 5.6.A.6 and Section 9. ` em 


(U/IFOUO) Duration: An FBI employee may initiate an assessment for this purpose only 
with prior SSA or SIA approval. The effective date of the assessment is the date the 
supervisor approves the EC. Such an assessment may continue for as long as necessary to 
achieve its purpose and objective. When the objective has been met, a closing EC must 

’ be approved by the SSA or SIA and uploaded to the file. ' 


(U//FOUO) Documentation: The approval to initiate this type of assessment and the 


request far annroyval to use applicable nvestigative methods must be documented in an 


(U//E OUO) Approval: All assessments conducted.pursuant to this subsection must be 


approved:in advance by ah SSA or SlA:and be opened in either the appropriate 
E other as directed in the DI PG) or the 


appropriate substantive investigative classification as an- assessment file with an opening 
EC. The title/case caption of the opening EC must contain the word'“Assessment,” and 
the synopsis must identify the purpose and the objective of the assessment. If at the time 
of the opening, or at anytime thereafter, the assessment involves a sensitive investigative 
matter, the title/case caption must contain the words “Assessment” -and “Sensitive 
‘Investigative Matter.” 


(UME QUO) File Review: This type of assessment requires recurring 90-day file reviews 
of.the assessment file and any sub-file by the SSA or SIA in accordance with Section 3.4. 
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Investigative file reviews for probationary FBI employees are recommended every 30 
days but must be conducted at least every 60 days. This file review must: 


a. (U//FOUO) Evaluate the progress made toward achieving the authorized purpose and 
objective; 


b. (U//FOUO) Determine whether it is reasonably likely that information will be 
obtained that is relevant to the authorized objective, thereby warranting an‘cxtension- 
for another 90 days (at least: every 60 days for probationary FBI employees); 


c. (U//FOUO) Determine whether adequate predication has been developed to justify 
opening a criminal, counterterrorism, counterintelligence, cyber, or weapons of mass 
destruction predicated investigation; and ` 


d. (U//FOUO) Determine whether the assessment should be terminated. 


(U//FOUO) An SSA or SIA may approve an assessment under this subsection in 
accordance with the standards listed in the DIOG Section 5.5 . However, if the assessment 
involves a sensitive investigative matter, then the initiation requires prior CDC review 
and SAC approval. If a sensitive investigative matter arises after the initiation of an 
assessment, investigative activity must cease'until CDCteview and SAC approval is © 
‘acquired. The term “sensitive investigative.matter” is defined in Section 5.7 and Section, 
10. Higher supervisory approval, as described in Section 5.9, may be required prior to use 
of the following investigative methods: physical surveillance, certain interviews, and 
tasking: of confidential human sources. In addition, as specified in-the Division PGs, there 
are agreements (e.g., Memoranda of Agreements/Understanding, Treaties) that may 
require particular coordination prior to the release/acquisition of federal, state, local, 
tribal and foreign government information. 





(U//FOUO) Any collection undertaken in order to identify threats, vulnerabilities, or 
intelligence gaps identified as a result of domain analysis or in response to an FBI 
National Collection Requirement or FBI Field Office Collection Requirement must' be 


addressed in a separate substanti cording to the 
investigative matter (e.g. . Additionally, any 
time an assessment begin$t0- icular individual, a separate substantive. ` 


classification assessment file or subfile, as appropriate, according to the investigative 


matter must be opened on the individual. b2 
(U//FOUO) Responsible Entity: In general, the Field Intelligence Group (FIG) or BLE 
FBIHQ DI will manage this type of assessm nt, regat nt is 

documented in an or ae o aen 

directed in the DI or a substantive investigative classification file. This includes 

substantive assessments derived from analysis produced and documented i 







as directed in the DI PG). Under the management 
of the FIG; substantive Field Office Squads can support the collection of information for 
this type of assessment. ‘However, substantive Field Office Squads or FBIHQ Units will 
be responsible for initiating and managing particular kinds of type 3 assessments. These 


assessments will be documented in the a propriate substantive investigative classification 
file. ` 
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. (U//FOUO) Obtain information to inform or facilitate intelligence analysis and 


planning. [AGG-Dom, Part IV]. 


(U//FOUO) Assessments ‘in this section may include activities designed to collect 
information for domain analysis.in order to respond to an FBI National Collection 
‘Requirement or FBI Field Office Collection Requirement created in response to FBI 
operational needs or an intelligence gap identifiéd.through strategic analysis that was 
conducted as part of the FBI’s national security or law-enforcement responsibilities, as’ 
discussed: in Sections 5.11 and-5.12. FBIHQ directed National Domain Assessments must 
be coordinated in advance with the FBIHQ DI, Domain Management Section (DMS). See 
the DLPG for details. _ 


(U//FOUO) This type of assessment may not be used for the purpose of collecting 
positive foreign intelligence, although such intelligence may be incidentally collected 
during this type of assessment. Positive foreign intelligence can only be collected: 
pursuant to Section 5.6.A.6 and Section 9. 


(U//FOUO) Duration: An FBI employee may initiate an assessment for this purpose only 
with prior SSA or SIA approval. The effective date of the assessment is the date the 
supervisor approves the EC. Such an assessment may. continue for as long as necessary to 
achieve its purpose and objective. When the objective has.been met, a closing EC must 
be approved by the SSA or SIA and uploadéd to the file. 


(U//FOUO) Documentation: The approval to initiate this type of assessment and the 
request for approval to use applicable investigative methods must be documented ‘in an 


EC. This type of assessment may be documented in either the appropriate[ __| 
ae eee 


appropriate substantive ‘investigative classification assessment file. 


52 
UNCLASSIFIED-FOR OFFICIAL USE ONLY 





b2 
b7E 


b2 
b7E 


b2 
b7E 


b2 
b7E 


UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Inyestigations and Operations Guide 


(U//FOUO) Approval: All assessments conducted pursuant to this subsection must be 


approved in advance by an SSA or SIA and 


fee 





b2 
b7E 


(U//FOUO) File Review: This type of assessment requires recurring 90-day file reviews 
of the asséssment file and any sub-file by the SSA or SIA in accordancé with DIOG 
Section 3.4. Investigative file reviews for probationary FBI employees are recommended 
every 30 days but must be conducted at least every 60 days. This file review must: 


a. (U//FOUO) Evaluate the progress made toward achieving the authorized purpose and 
objective; ` 


b. (U//FOUO) Determine whether it is reasonably likely that information will be 
~- obtained that is relevant to the authorized objective, thereby warranting añ extension 
for another 90 days (at least every 60 days for probationary FBI employees); 
c. (U//FOUO) Determine whether adequate predication has been developed to justify 


opening'a criminal, counterterrorism, counterintelligence, cyber, or weapons.of mass 
destruction predicated investigation;.and 


‘d. (U//FOUO) Determine whether the assessment should be terminated. 


(U//FOUO) An SSA or SIA may approve an.assessment under this subsection in 
accordance witli the standards listed in the DIOG Section 5.5. However, if the assessment 
‘involves a Sensitive investigative matter, then the initiation requires prior CDC review 
and SAC approval. If a sensitive-investigative matter arises after the initiation of an 
assessment, investigative activity must cease until CDC review and SAC approval is 
acquired, The term “sensitive investigative matter” is defined in Section 5.7 and DIOG 
Section. 10. Higher supervisory approval, as. described in Section 5.9, may be required 

_ before using the. following investigative methods: physical surveillance, certain 
interviews, and tasking of confidential human sources. In addition, as specified in the 

- Division PGs, there are agreements (e.g., Memoranda of Agreements/Understanding, 

Treaties) that may require particular coordination prior to the release/acquisition of 
federal, state, local, tribal and foreign government. information. 

(U//F QUO) Any collection undertaken in order to identify threats, vulnerabilities, or 


. 


intelligence gaps identified as a result of domain analysis or in response to an FBI- 
National Collection Requirement or FBI Field Office Collection Requirement must be 
addressed in a separate substantive classificati cording to the b2 
investigative matter (e.g., Additionally, any b7E 
time an assessment begins to focus on a particular individual, a separate substantive 
classification assessment file or subfile, as.appropriate, according to the investigative 

matter must be opened on the individual. ; 
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(U/FOUO) Responsible Entity: The FIG or FBIHQ DI will manage this type o 
j a 


assessment, regardless of whether the assessment isdocumented inan) | : 
ates directed in the DI PG) or a substantive investigative 
classification file. This includes substantive assessments derived from alysis produced 


and documented in[”< | (or rT | as directed in the 
DI PG). Under the management of the FIG, substantive Field Office Squads can support . 
the collection of information in this type of assessment. ' 


EOSO E A 


Uew OU O 


EO 0 eee 


- (U//FOUO) Seek information to identify potential human sources, assess the 
suitability, credibility, or value of particular individuals as human sources, validate 
human sources, or maintain the cover or credibility of human sources, who may be 
able to provide or obtain information relating to criminal activities in violation of 


federal law, threats to the national security, or matters of foreign intelligence 
interest. 3 


(U//FOUO) Duration: All such activities must follow the policy requirements 


established in the FBI’s Confidential Human Source Policy Manual (CHSPM), . 


Confidential Human Source Validation Standards Manual (CHSVSM), and The Attorney 
* ana - . r re ° 
General's Guidelines Regarding the Use of FBI Confidential Human Sources (AGG- 


CHS),.and implemented in.___] If there is any inconsistency between the CHSPM or 


To 
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CHSVSM and the DIOG, the DIOG controls and OGC should be immediately notified of 
the conflict. í 


(U/FOUO) Documentation:[_____ | must be used-to document all activities under this 
provision, unless otherwise directed in the DI PG or other FBIHQ Division PGs. ~ 


(U//FOUO) Approval: All approvals must follow the policy requirements established in 
the FBI’s CHSPM, CHSVSM, and the AGG-CHS, and as implemented in 


(U//FOUO) File Review: File reviews must be conducted in accordance with. the FBI’s 
CHSPM. 


(U//FOUO) Responsible Entity: A FIG or substantive squad may conduct and manage 
this type of assessment. 


. (U//FOUO) Seek information, proactively or in response to investigative leads, 


relating to matters of foreign intelligence interest responsive to foreign intelligence 
requirements. 


(U//FOUO) Foreign Intelligence is “information relating to the capabilities, intentions, or 
activities of foreign governments or elements thereof, foreign organizations, or foreign 
persons, or international terrorists.” The FBI defines a foreign intelligence requirement to 
be:a collection requirement issued by the United States Intelligence Community (USIC) 
and accepted by the FBI DI. The collection of foreign intelligence pursuant to this 
definition extends the sphere of the FBI’s information-gathering activities beyond federal 
crimes and threats to the national security, and permits the FBI to seek information 
regarding a broader range of matters relating to.foreign powers, organizations, or persons 


that may be of interest to the conduct of the United States’ foreign affairs. (AGG-Dom, 
Introduction A.3) 


(U//FQUO) Under this authorized’ purpose, an FBI employee may only collect 
information.that relates to matters of positive foreign intelligence. (See DIOG Section.9 
for a description of “positive foreign intelligence.”) An FBI employee should prioritize 
collection against FBI National Collection ‘Requirements before attempting to collect 


against a positive foreign intelligence requirement. The DI PG furnishes guidance on the 
prioritization of collection. : 





(U//FOUO) Duration: An FBI employee may initiate an assessment for this purpose only 
with-prior Field Office SSA.or SIA approval and FBIHQ Collection Management Section 
(CMS) approval. The effective date of the assessment is the date F BIHQ CMS approves 
the assessment. Such an assessment may continue for as long as necessary to achieve its 
purpose and objectives. When the objective has been met, a closing EC must be approved 
by the Field Office SSA or SIA. and FBIHQ CMS and uploaded to the file. 


(U//FOUO) Documentation: This type of assessment must use an EC to document the 
initiation approval of the.assessment and the request and approval for the use of 


applicable investigative methods. Foreign intelligence to this 
subsection must be maintained in hee as otherwise 
determined by FBIHQ CMS. The DI urther describes this process. . 





(U//FOUO) Approval: Assessments to collect-on matters of “foreign intelligence 
interest” must be approved in advance by. FBIHQ CMS in accordance with the standards 
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listed in Section 5.5. 





In addition to the normal 
‘equirement tO use the least intrusive method to gather information during an assessment, 
when conducting this type of assessment the FBI employee must be mindful of the 
additional requirement to operate openly and consensually with a United States person, to 
the extent practicable. 





(U//FOUO) File Review: This type of assessment requires recurring 90-day file reviews 
of the assessment file and any sub-file by the SSA or SIA in accordance with Section 3.4, 
Investigative file reviews for probationary FBI employees are recommended every 30 
days ‘but must be conducted at least every 60 days. This file review must: 


a. (U//FOUO) Evaluate the progress made toward achieving the authorized purpose and 
objective; i 


b. (U/FOUO) Determine whether-it is reasonably. likely-that information: will be 
obtained that is relevant to the authorized objective, thereby warranting-an extension 
for another 90 days (at least every. 60 days for probationary FBI employees); 


¢. (U//FOUO) Determine whether adequate predication has been developed to justify 
opening a criminal, counterterrorism, counterintelligence, cyber, or weapons of mass 
destruction predicated investigation; and 


d. (U//FOUO) Determine whether the assessment should be terminated: 


(U//FOUO) If the initiation of the assessment involves a sensitive investigative matter, it 
must be.reviewed by the CDC and approved by-the SAC, prior to seeking FBIHQ CMS 
authorization. Ifa sensitive investigative matter arises after the initiation of an assessment, 
investigative activity must cease until CDC review and SAC approval is acquired and 
notice provided to FBIHQ CMS. Higher supervisory approval, as described in Section 
5.9, may be required before using the following investigative methods: physical 
surveillance, cértain interviews, ard tasking of confidential human sources. In addition, 
as.specified inthe Division PGs, there are agreements (e.g., Memoranda of : 
Agreements/Understanding, Treaties) that may require particular coordination prior to the 
release/acquisition of certain federal, state, local, tribal and foreign government 
information. 


(U//FOUO) Positive foreign intelligen suant to this subsection must be ` 
maintained eee ee al as otherwise determined by _ 
FBIHQ CMS. The title/case caption of the opening EC must contain the word BA 


“Assessment,” and the synopsis must identify the purpose and the objective of the as 
assessment. If at the time of the opening, or at anytime thereafter, the assessment : 

involves a sensitive investigative matter, the title/case caption must contain the words 
“Assessment” and “Sensitive Investigative Matter.” The DI PG further describes this 

process. 
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(U/FOUO) Responsible Entity: This type of assessment is managed by the FIG and 
FBIHQ DI. ; 


5.7. (U) Sensitive Investigative Matter / Academic Nexus / Buckley Amendment 


A. (U/FOUO) Sensitive Investigative Matter: An investigative matter involving the activities 
of a domestic public official or political candidate (involving corruption or a threat to the 
national security), religious or political organization or individual Prominent‘in such an 
organization, or news media, or any other matter which, in the judgment of the official 

` authorizing an investigation, should be brought to the attention of FBI Headquarters and 
other DOJ officials. (AGG-Dom, Part VII-N.) As a matter of FBI policy, “judgment” means 
that the decision of the authorizing Official is discretionary. DIOG Section 10 and the DIOG 


-classified' Appendix G defing 


- (U//FOUO) Academic Nexus: 















(U//FOUO) The sensitivity related to an academic institution arises from the American 
tradition of “academic freedom” (¢.g., an atmosphere in which students and faculty are free 

to express unorthodox ideas and views and to challenge conventional thought without fear of - 
repercussion). Academic freedom does not mean, however, that academic institutions are off 


limits to FBI investigators in pursuit of information or individuals of legitimate investigative 
interest. 


(U/FOUO, 
see the DIOG classified Appendix G., ' 


C. (U//FOUO) Buckley Amendment: A request for “academic records” must only be made 
pursuant to the provisions of the Buckley Amendment (The F amily Educational Rights and 
Privacy Act of 1974, 20 U.S.C. § 1232[g], as amended by Public Law 107-56 [FUSA 
PATRIOT Act”]). An FBI employee is prohibited from receiving “academic records” that 
have not been properly requested pursuant to the Buckley Amendment. The definition of 
“academic records” is very broad and covers almost all records about a student other than 
public, student directory-type information published by the institution. The Buckley 
Amendment contains a penalty provision for those institutions that improve i 
academic records to law e ement agencies | 












(U//FOUO) A Buckley Amendment request for academic records cannot be made during an 
assessment. In a predicated investigation, a request for academic records must be made 
pursuant to the Buckley Amendment. 
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5.8. (U//FOUO) Standards for Initiating or Approving the Use of an Authorized — 
Investigative Method 


(U/FOUO) Prior to initiating or approving the use of an authorized investigative method, an FBI 
employee or approving official must determine whether: 


A. (U//FOUO) The use of the particular investigative method is likely to further an objective of 
the assessment: ` l 


B. (U//FOUO) The investigative method selectėd is the least intrusive method, reasonable under 
the circumstances; 


C. (U/FOUO) The anticipated value of the assessment justifies the use of the.selected 
investigative method or methods; ` 


- (U//FOUO) If the purpose of the assessment is to collect positive foreign intelligence, the 
investigative method complies with the AGG-Dom requirement that the FBI operate openly 
and consensually with a United States person, to the extent practicable; and 


E. (U//FOUO) The method is an appropriate use of personnel and financial resources, 


5.9. (U) Authorized Investigative Methods in Assessments and Predicated 
Investigations 


(U) The following investigative methods-may be uséd in assessments and predicated 
investigations: 


A. (U) Obtain publicly available information. (AGG-Dom, Part IJ.A.4.a and Part VII.L.). 
T. (U) Scope: “Publicly available information” is information that is: 
a.. (U) Published or broadcast for public consumption; 
b. (U).Available on request to the public; , 
c. (U) Accessible on-line or otherwise to the public; 
d 


| (U) Available to the public by subscription or purchase; 


QL 


(U) Made available at a meeting open to the public; 


“h 


(U) Obtained by visiting any place or attending an event that is open to the public;.or 


g. (U) Could’be seen or heard by any casual observer not involving unconsented 
intrusion into private placés. : 


EO ON a o i au o n 


b7E 


2. (U//FOUO) Approval: Supervisory approval is not required for use of this method, 
" except as to information gathered at a religious service. Notwithstanding any other policy, 
tasking a CHS or UCE to attend a religious service-during a prédicated investigation, 


whether open to the public or-not, requires SSA approval. Tasking a-CHS to attend a 
religious service, whether open to th 
approval. 


e public or not, during an assessment requires SAC 
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3. (U/FOUO) Application: This investigative method may be used in assessments, national 
security investigations, criminal investigations, foreign intelligence collection cases, and 
for assistance to other agencies, 


4. (U) Use/Dissemination: The use or dissemination of information obtained by this 
method must comply with ‘the AGG-Dom and DIOG Section 14, 


B. (U) Engage in observation or surveillance not requiring a court order. Surveillance 
includes physical; photographic and video surveillance where such surveillance does 
not infringe on a reasonable expectation of privacy and trespass is not required to 

` accomplish the surveillance. (AGG-Dom, Part II.A.4.h) 


1. (U) Scope 


a. (U//FOUO) Physical Surveillance Defined: Physical surveillance is the deliberate 
observation by an FBI employee of persons, places, or events, on either a limited or 
continuous basis, in a public or a semi-public (e.g., commercial business open to the 
public) setting. 


movo] J ooo 


b. (U//FOUO)-Surveillance Enhancement. Devicés: The use of mechanical devices 
operated by the user (e.g., binoculars; hand-held cameras; radiation, chemical or 
biological detectors) is authorized in physical surveillance provided that the device is 
not used to collect information in which a person has a reasonable expectation of 
privacy (e.g., equipment such as a parabolic microphone or other listening device that 
would intercept a private conversation or thermal imaging a home is not permitted). 


2. (U//FOUO) Approval: During an assessment, physical surveillance may be approved for 
a period of time not to exceed[7_ Jas explained further below. 


a. (U//F OUO) Standards for Initiating or Approving Physical Surveillance Düring 
an Assessment: During an assessment,.in addition to the standards contained 'in 
Sections 5.5 and 5.8, the FBI employee and supervisor must coniider the following: 
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(U//FOUO) Whether the physical surveillance is rationally related to the 
articulated purpose and objective of the assessment; 


(U//FOUO) Whether the physical surveillance is the least intrusive alternative 


(U//FOQUO) If the physical surveillance is for the purpose of determining a 
pattern of activity, whether there is a logical nexus between the purpose of the 
assessment and the pattern of activity he or she is seeking to determine; and 


(U//FOUO) If being conducted in order to gather positive foreign intelligence, 
whether the surveillance is consistent with the requirement that the FBI 


employee operate openly and consensually. with a United States person, to the 
extent practicable. 


b2 
b7E 
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e.. (U//FOUO) Physical Surveillance during Predicated Investigations: Physical 


surveillance undertaken during a predicated investigation does not require 0 b2 ` 
supervisory approval b7E 


3. (U//FOUO) Application: This investigative method may be used in assessments, national 


C. 


l. 


‘security investigations, criminal investigations, foreign intelligence collection cases, and 
for assistance to other agencies when it is not otherwise prohibited-by AGG-Dom, Part 
II.B.2-3. 


(U) Use/Dissemination: The use or dissemination of information obtained by this 
method must comply with the AGG-Dom and DIOG Section 14. 


(U) Access and examinė FBI and other Department of Justice (DOJ) records, and 
obtain information from any FBI or other DOJ personnel. (AGG-Dom, Part I1.A.4.b.) 


(U//FOUO) Scope: As part of an assessment or predicated investigation, an-FBI 
employee may access and examine FBI and other DOJ records and may obtain 
information from any FB] personnel or other DOJ personnel. Access to certain FBI 
records may be restricted to designated FBI personnel because of the sensitive nature.of. 
the information in the record or the classification of the records. These include, but are 
not limited to: FBI records concerning human source identification; espionage 
investigations; code word; and other compartmented information. 


(U//FOUO) Approval: Supervisory approval is not required to use this method, except 
that if the use of records constitutes pattern-based data mining under the Federal. Data 
Mining Reporting Act of 2007, it must be reviewed and approved according to ‘paragraph 
3 below. 


(U//F QUO) Pattern-Based Data Mining: The vast majority of data analysis performed 
during FBI assessments is based on subjects or events and does not meet the definition of 
‘pattern-based data mining. Pattern-based data mining is the use of one or more data bases 
to search for persons who fit a set of group characteristics or pattérns of behavior (e.g., 
the known characteristics of a particular terrorist organization). Any such analysis based 
solely on racial, ethnic, national origin or religious characteristics is strictly prohibited. 
Sensitive Operations Review Committee (SORC) approval is required for any analytical, 
search of FBI or other agency data bases that constitute pattern-based data mining, as 
defined above. Additionally, pursuant to the Federal Data Mining Reporting Act of 2007, 
the FBI must report-all agency initiatives that involve the use of pattern-based data 
mining to Congress, ` . 


(U//FOUO) Application: This invéstigative matod may. be used in assessments, national 
security investigations, criminal investigations, foreign intelligence collection cases, and 
for assistance to other agencies. 


(U) Use/Dissemination: The use or dissemination of information obtained by this: 
method must comply with the AGG-Dom and DIOG Section 14. 
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D. (U) Access and examine records maintained by, and request information from, other 
federal, state, local, or tribal, or foreign governmental entities or agencies. (AGG-Dom, 


Part II.A.4-c.) 


1, (U//FOUO) Scope: As part of an assessment or predicated investigation, an FBI 
employee may access and-examine records maintained by, and request information from, 
other federal, state, local, or tribal, or foreign governmental entities or agencies. When 
requesting information using this authority, care must’be taken to ensure the entity 
concerned understands that it is not compelled to provide such information or create a 
new record for the purpose of assisting the FBI. i 


. (U//FOUO) Approval: Supervisory approval is not required to use this method for 
“routine uses,” unless. such approval is required by Memoranda of Understanding (MOU) 
or other agreements for requesting such information. The FBI may request another 
federal agency to disclose Privacy Act-protected records pursuant to the other agency’s 
“routine uses” (5 U.S.C. § 522a[b][3]) or through a written request for a law enforcement 
purpose (5 U.S.C. § 522a[b][7]). Such written requests (for a law enforcement purpose) 
pursuant to 5 U.S.C. § 522a(b)(7) may be made by the Director or his designee, provided 
that such authority may not-be delegated below the Section Chief level-(28- CFR. 

§ 16.40[c]; OMB Guidelines, 40 Fed. Reg. at 28,955). Requests for records or 
information from a foreign government entity or agency must be appropriately 
coordinated through the applicable FBJ-Legat office, Office of International Operations 
(OIO), INTERPOL, relevant substantive headquarters division, and/or DOJ Office of 
International Affairs, as necessary. Direct contact is authorized in certain circumstances, 
such as an imminent threat situation. If the analysis of records obtained in this manner 
constitutes pattern-based data mining únder the Federal: Data Mining Reporting Act of 
2007, it must be reviewed and approved acċording to Section. 5.9.C.3, above.. 


roto eee 






(U//FOUO) Records received from an outside entity and used during an assessment must 
be maintained as part of the T file a 


. (U//FOUO) Application: This investigative method may be used in assessments, national 


security investigations, criminal investigations, foreign intelligence collection cases, and 
for assistance to other agencies. 


4. (U) Use/Dissemination: The use and/or dissemination of information obtained by this 
method must comply with the AGG-Dom and DIOG Section 14. 


E. (U) Use online services and resources (whether non-profit or commercial). (AGG-Dom, 
Part IL.A.4.d.) 


‘I. (U//FOUO) Scope: As part of an assessment or predicated investigation, an FBI 
employee may use any FBI-approved on-line service or resource that is available by 
subscription or purchase, including services available only to law enforcement entities. 
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2. (U//FOUO) Approval: Supervisory approval is not required to use this method, although 
subscribing to or purchasing any new service or resource must be done according to FBI 
contracting procedures. 


(U//FOUO) Example: FBI-approved on-line services or resources include, but are not 
limited to: Google, Yahoo, or similar Internet search services; data brokers such as 
ChoicePoint, Westlaw, and Lexis-Nexis; and vehicle, casualty, and property insurance 
claims databases such as Claim-Search. 


3. (U//FOUO) Application: This investigative method’ may be used in assessments, national 
security investigations, criminal investigations, foreign intelligence collection cases, and 
‘for assistance to other agencies. 





4. (U) Use/Dissemination: The use.or dissemination of information obtained by this 
method must comply with the AGG-Dom and DIOG Section 14. 


F. (U) Interview or request information from members of the public and private entities. 
(AGG-Dom, Part IT.A.4.f) 


1. (U//FOUO) Scope: An interview is the questioning of an individual (to include the 
- Subject).designed-to gather information-from-the person being interviewed that is-accurate, 

pertinent to, and within the scope of an authorized assessment or predicated investigation. 
In the normal course of an interview, the FBI employee should divulge the employee’s 
affiliation with the FBI and the true purpose of the interview. Information requested 
during an interview must be voluntarily provided. If the person who is being interviewed 
expresses a desire not to provide the information, the FBI employee may riot state or 
imply in any way that the interviewee is compelled to provide information or that adverse 
consequences may follow if the interviewee does not provide the information. If thé 
person being interviewed indicates he or she wishes to consult an attorney, the interview 
must immediately stop. 


2. (U//FOUO) Custodial Interviews: Within the United States, Miranda warnings are 
required to be given prior to custodial interviews if the subject is significantly restricted 
in his/her freedom of action to a degree normally associated with a formal arrest. For 
more information refer to the CID and CTD-PGs and The FBI Legal Handbook for 
Special Agents (LHBSA), Section 7-3-2. 


3. (U//FOUO) Approval: With the exceptions discussed below, interviews do not require 
supervisory approval. 


a. (U//FOUO) Contact With Represented Persons: 


(U//FOUO) CDC review is required before contact with represented persons. Such 
contact may implicate legal restrictions and affect the admissibility of resulting 
-evidence. Hence, if an individual is known to be represented by counsel ina 
particular matter, the CDC will follow applicable law and DOJ procedure when 
reviewing the request to contact the represented individual in the absencé of prior 
notice to counsel. The SAC, CDC, or their designees, and the United States Attorney 
or their designees must consult periodically on applicable law and DOJ procedure. 
The Field Office may raise the following issues with the United States Attorney’s 
Office and request that it consult with the DOJ Professional Responsibility Advisory 
Office, when the issues include, but are not limited to, the inconsistent application of: 
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(i) state ethics rules; or (ii) rules for contacts with répresented persons. (AGG-Dom, 
Part V.B.1) : - 


b. (U//FOUO) Members of the United States Congress and their Staffs: 


(U//FOUO) Generally, FBI employees may take information received from 
congressional offices just as they would take information from other sources, and 
they may act upon it accordingly. 


(U//FOUO) However, prior CDC review, SAC and appropriate FBIHQ AD approval 
and prior notice to the AD Office of Congressional Affairs (OCA) are required if an 










a 






b2 
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ote: [he FBIHQ substantive Division policy implementation 
guides may contain additional approval/notice requirements. 


ce. (U//FOUO) White House Personnel: 


(U//FOUO) CDC review. and SAC approval.is requiréd before initiating contact with. 
White House personnel. Additionally, CDC review; SAC approval and appropriate 
FBIHQ Section.Chief approval must be obtained prior to conducting-an interview of a 
member of the White House staff. Note: The FBIHQ substantive Division policy 
implementation guides may contain additional approval/notice requirements. 


‘d, (U) FBIHQ Substantive Division Requirements: 


1.  (U//FOUO) Counterintelligence Division: Interviews conducted during 
counterintelligence assessments and predicated investigations must comply 
with the requirements contained in the. Memorandum of Understanding 
Between the Department of State.and the. FBI on Liaison for 


Counterintelligence Investigations. The FBIHQ Counterintelligence Division 
PG contains interview approval requirements. 


ii.  (U//FOUO) Other FBIHQ. Divisions: Each FBIHQ Division may provide 
additional interview approval requirements in-its policy implementation guide. 


4. (U//FOUO) Requesting Information Without Revealing FBI Affiliation or the True 
Purpose of a Request:. a 


a (WROUOY o 
; b2 
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g. (U//FOUO) 
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iii. (U//FOUO 


b7E 
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vii. (U//FOUO 


b2 
b7E 


viii (U//FOUO 


b2 
b7E 


5. (U//FOUO) Application: This investigative method may be used in assessments, national 
security investigations, criminal investigations, foreign intelligence collection cases, and 
for assistance to other agencies when it is not otherwise prohibited by AGG-Dom, Part 
{11.B.2-3. 


6. (U) Use/Dissemination: The use or dissemination of information obtained by this method 
must comply with:the AGG-Dom and DIOG Section 14. ` 


G. (U) Accept information voluntarily provided by govérnmental or private entities. 
a Part II.A.4.g.) 


. (U//FOUO) Scope: As part of an assessment or predicated investigation, an FBI 
employee may accept information voluntarily provided by federal, state, local, or foreign 
governmental or private entities to include individuals. Voluntarily provided information 
includes, but is not limited to, oral as well as documentary and. physical evidence such as:. 
a computer hard drive or other electronic media that contains information, paper 
documents containing information, or physical objects (e.g., handgun or narcotics). 
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A (U//FOUO) Approval: Supervisory approval is not required to accept voluntarily 


provided information. Personnel may not request nor knowingly accept information 
where disclosure would be prohibited by federal law. See, e.g., 18 U.S.C. § 2702 
(prohibiting an entity providing electronic communications services from divulging 
certain communications and other records, except in cértain circumstances). 


. (U//FOUO) Application: This-investigative method may be used in assessments, national _ 
security investigations, criminal investigations, foreign intelligence collection cases, and 
for assistance to other agencies when it is not otherwise prohibited by AGG-Dom, Part 
TIH.B.2-3. 


. (U) Use/Dissemination: The use or dissemination of information obtained by this 
method must comply with the AGG-Dom and DIOG Section 14. 





H. (U) Use and recruit human sources in conformity with the Attorney General’s 


Guidelines Regarding the Use of FBI Confidential Human Sources. (AGG-Dom, Part. 
IL.A.4.e) 


1. (U//FOUO) The FBI may use and recruit human sources in assessments and predicated 





‘investigations in conformity with the AGG-Dom, AGG-CHS, the FBI CHSPM, and the 
FBI CHSVSM. In this context, “tise” means obtaining information from, tasking, or 
otherwise operating. such sources. (AGG-Dom, Part VI.V.) 


. (U//FOUO) A CHS can be “used” in support of an assessment and a predicated 
investigation or for the purpose of validating, vetting or determining the suitability of 
another CHS as part of an assessment. 


. (U/FOUO) Religious Service—Notwithstanding any other policy, tasking a CHS to 
attend a religious service, whether or not open to the public, requires SSA approval ina 
predicated investigation and SAC approval in an assessment. 


. (U/FOUO) All investigative methods.should be evaluated to ensure compliance with the 
admonition that the FBI should use the least intrusive method practicable. That 
requirement should be particularly observed during an assessment when using a CHS 
because the use of a CHS during an.assessment maybe more intrusive than many other 
investigative methods. Use of a CHS in an assessment should take place only after 
considering whether there are effective, less intrusive means available to obtain the 
desired information. The CHS must comply with all constitutional, statutory, and 
regulatory réstrictioris and limitations. In addition: 


a. (U//FQUO) CHS use and direction must be limited in focus and scope to what is 
necessary to accomplish the authorized G a 


purpose and ob 
or predicated investigatio a 


b. (U//FOUO) A CHS may be directed to seek information about an individual, 
group or organization only to the extent that such information is necessary to 
achieve the specific.objective of the assessment. If such contact reveals 
information or facts about an individual, group or organization that meets the 
requirements of a predicated investigation, a predicated investigation may be 
opened, as appropriate. 
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f. (U//FOUO) If there is any conflict between the CHSPM or CHSVSM.and.the 
DIOG, the DIOG controls and‘OGC. should be immediately notified of the 
conflict. 


5. (U//FOUO) Application: This investigative method may be used in assessments, national 
security investigations, criminal investigations, foreign intelligence collection cases, and 
‘for assistance to other agencies when it is not otherwise prohibited by AGG-Dom, Part ° 
AS1.B.2.., . 


(U) Note: When collecting positive foreign intelligence, the FBI must operate openly 
and consensually with a United States person, to the extent practicable. 


6. (U) Use/Dissemination: The use or dissemination of information obtained by this 
method must comply with the AGG-Dom-and DIOG Section 14. 


I. (U) Grand jury subpoenas for telephone or electronic mail subscriber information. 
(AGG-Dom, Part If.A.4.i) 


1. (U//FOUO) Scope: During atype | or 2: assessment, an FBI employee may request 'from 
an appropriate United States Attorney’s Office (USAO) the issuance of a Federal Grand 
Jury (FGJ) subpoena for the limited purpose of obtaining subscriber information. A FGJ 
subpoena, under this provision, may not be requested for the purpose of collecting 
foreign intelligence. For more information'regarding FGJ subpoenas, seè DIOG Section 
11.9; 


(U//F OUO) Note: The use of Federal Grand Jury Subpoenas; to include subpoenas for 
telephone or electronic.mail subscriber information, is not authorized in a type 3, 4, or 5 
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assessment or in a type 6 assessment or full investigation initiated for the purpose of 
collecting positive foreign intelligence. 


2. (U//FOUO) Approval: Ina type 1 or 2 assessment or predicated investigation, 
supervisory approval is not required prior to requesting a USAO to issue a FGJ subpoena 
for telephone or electronic mail subscriber information. . 


3. (U) Electronic Communications Privacy. Act (ECPA) (18 U.S.C. §§ 2701-2712): 
ECPA, 18 U.S.C. § 2703 states “a provider of electronic communication service or 
remote computing service shall disclose to a governmental entity the: (i) name; (ii) 
address; (iii) local and long distance telephone connection records, or records of sessions, 

- times and durations; (iv) length of service (including start date) and types of service 
utilized; (v) telephone or instrument number or other subscriber number or identity, 
including any temporarily assigned network address; and (vi) means and source of 
payment for such service (including any credit card-or bank account number), of a 
subscriber to.or customer of such service when the governmental entity uses . . . a Federal 
Grand Jury [subpoena] . . .” (emphasis added) ; 


4. (U/FOUO) Application: This investigative method may be used intypeland2 
assessments, national security investigations, criminal investigations, and for assistance 
to other agencies if relevant to an already open type | or 2 assessment or predicated 
investigation. This method may not'be used to collect positive foreign intelligence 
information. 


5. (U) Use/Dissemination: 


b2 
b7E 





The use or dissemination of information obtained by this method must 
comply with the AGG-Dom, DIOG Section 14, and the Federal Rules of Criminal 
‘Procedure (FRPC) Rule 6. 


5.10. (U) Investigative Methods Not Authorized During Assessments 


(U) The following. methods may not be used in an assessment: 





(U//FOUO) Note: F or use of lawful investigative methods during the recruitment, assessment 
and validation of a CHS, refer to the AGG-CHS, CHSPM, and CHSVSM. 


A. (U) Mail covers 

B. (U) Physical searches of personal or real property where a warrant or.court order is not 
legally required because there is no reasonable expectation of privacy (e.g., trash covers) 

C. (U) Consensual monitoring of communications. including consensual computer monitoring 


D. (U) Use of closed-circuit television. direction finders. and other monitoring devices 
E. (U) Polygraph examinations 


F. (U) Undercover operations 
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(U//FOUO) Thè FBIHQ DI establishes FBI National Collection Requirements after coordination 
with FBIHQ OGC, other FBIHQ substantive Divisions, and Field Offices. An FBI National 
Collection Requirement describes information needed by the FBI to: (i) identify or obtain 
information about potential targets of, or vulnerabilities.to, federal criminal activities or threats 
‘to the national-security; or (ii) inform or facilitate intelligence-analysis and planning:pertinent-to 
the FBI’s law enforcement or national security missions. 





. (U) Accessing stored wire and electronic communications and transactional records 


. (U) Physical searches where there is a reasonable expectation of privacy 
. (U) Acquisition of foreign intelligence information in conformity with Title VI of the 
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(U//FOUO) Compulsory process. including grand jury subpoenas (except: subscriber 


information during type | and 2 assessments). administrative and other subpoenas. and 
National Security Letters 


(U) Use of-pen registers and trap and trace devices. 
(U) Electronic surveillance : 


Foreign Intelligence Surveillance Act (FISA) 
5.11. (U//FOUO) FBI National Collection Requirements _ 


Ga a 
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- |(U//FOUO) Before any investigative activity is initiated in order to respond to an FBLNational 

Collection Requirement, an assessment must be initiated or already open. An assessment cannot 
-be opened solely based upon an FBI National Collection Requirement. An authorized purpose 

(national security or criminal threat) must exist and an objective must be clearly articulated that 
identifies an authorized purpose prior to opening an assessment: During an assessment, the FBI 
is authorized to collect against any FBI National Collection Requirement that is-relevant to the 
assessment because such requirements are issued for information necessary to identify potential 
threats or vulnerabilities (e.g., type 3 assessment) or to collect information necessary for 


intelligence analysis (¢.g., type 4 assessment)["CSCSC“‘;C;C;SCSCSCSCSCSCSSSCC*d 


_(U//FOUO) 






TE a a ee 


5.12. (U//FOUO) FBI Field Office Collection Requirements 


(U//FOUO) An FBI Field Office Collection Requirement describes information needéd by the 
field to: (i) identify or obtain information about potential targets of or vulnerabilities to federal 
criminal activities or threats to the national security; or (ii) inform or facilitate intelligence 

, analysis and planning pertinent to the FBI’s law enforcement or national sécurity missions. 


(U/FOUO) Before any investigative activity may be conducted to respond to an FBI Field 
Office Collection Requirement,.an assessment must be initiated or.already open. An assessment 


cannot be opened solely based upon an FBI Field Office C 


O OD KE? men 












contains detailed guidance regarding the Field Office Collection Requirements. 


5.13. (U) Retention and Dissemination of Privacy Act Records 


(U//FOUO) The Privacy Act restricts the maintenance of records relating to the exercise of First 
Amendment rights by individuals who are United States persons. Such records may be 
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maintained if the information is pertinent to and within the scope of authorized law enforcement 
activities or for which there is otherwise statutory authority for the purposes.of the Privacy Act 
(5 U.S.C. § 522a[e]}[7]). Activities authorized by the AGG-Dom are authorized law enforcement 
activities. Thus, information concerning the exercise of First Amendment rights by United-States 
persons may be retained if it is pertinent to or relevant to the.FBI’s law enforcement or national 
security activity. Relevancy must be determined by the circumstances. If the information is not 
relevant to the law enforcement activity being conducted, then it may not be retained: For more 
information see DIOG Section 4. (AGG-Dom, Part I.C.5) 


(U//FOUO) Even if information obtained during an assessment does not warrant opening a 
predicated investigation, the FB] may retain personally identifying information for criminal and 
national security purposes. In this context, the information may eventually serve.a variety of 
valid analytic purposes as pieces of the overall criminal or intelligence picture are developed to 
detect and disrupt criminal and terrorist activities. In addition, such information may assist FBI 
personnel in responding to questions that may subsequently arise as to the nature and extent of 
the assessment and its results, whether positive or negative: Furthermore, retention of such 

_ information about an individual collected in the course of.an assessment will alert other 
Divisions or Field Offices considering conducting an assessmention the same individual that the. 
particular individual is not a crirninal or national security threat. As such, retaining personally 
identifying information collected in the course of an assessment will also serve to conserve _ 
resources and prevent the initiation of unnecessary assessments and other investigative activities. 


(U) Marking Closed Assessments That Contain Personal Information: Information obtained 
during an assessment that has insufficient value to justify further investigative activity may 
contain personal information. As a result: (i) when records retained in an assessment.specifically 
identify an individual or group whose possible involvement in criminal or national security- 
threatening activity was checked out through the assessment; and (ii) the assessment turns up no 
sufficient basis to justify further investigation of the individualor group, then the records must 
be clearly annotated as follows: “It is noted that the individual or group identified during the 
assessment does not warrant further FBI investigation at this time. It is recommended that this 
assessment be closed.” Extreme care should be taken when disseminating personally identifiable 
information collected during an assessment that does not lead to sufficient facts to open a 
predicated investigation. If personal information frorn the assessment is disseminated outside the 
FBI according to authorized dissemination guidelines and procedures, it must be accompanied by 
the required annotation that the assessment involving this individual or group did not warrant 
further investigation by the FBI at the time the assessment was closed. 






a Moreover, an FBI 
employee, who shares information from such a closed assessment file, must ensure that the 
specific.annotation (as discussed above) is included with the shared information. 


5.14. (U) Assessment File Records Management and Reténtion 
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TEC 1an, or any successor information technology system, must be retained 
according to NARA regulations. 


(U//FOUO) Assessments that require prior super 


i Foa by the SSA or SIA, and 
Assessment classification files must be retained according to NARA 


regulations. 
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6. (U) Preliminary Investigations 


6.1. (U) Overview 


(U) The AGG-Dom authorizes a second level of investigative activity—predicated investigations. 
Predicated investigations that concern fèderal crimes or threats to the national security are 
subdivided into preliminary investigations and full investigations. Preliminary investigations , 
may be initiated on the basis of any “allegation or information” indicative of possible.criminal 
activity or threats to the national security. 


6.2. (U) Purpose and Scope 


(U//FOUO) Preliminary investigations may be carried out to detect, obtain information about, or 
prevent or protect against federal crimes’or threats to the national security. However, a 
preliminary investigation cannot be initiated or used solely for the purpose of collecting against 

` Positive Foreign Intelligence Requirements, or for conductirig énterprise investigations. 
Intelligence responsive to Positive Foreign Intelligence Requirements, FBI National Collection- 
Requirements and FBI Field Office Collectión Requirements may be collected incidental to a 
preliminary investigation. concerning another person, organization, or entity. If Positive Foreign 
Intelligence Requirement, FBI National Collection Requirement or'FBI Field Office Collection 
Requirement information is incidentally collected-in a preliminary investigation, it should be 
forwarded to the FIG for evaluation and potential dissemination against collection requirements. 


(U) In preliminary investigations, the immediate objectives include such matters as: determining 
whether a federal crime has occurred or is occurring, or if planning or preparation for such a 
crime is taking place; identifying, locating, and apprehending the perpetrators; obtaining 
evidence needed for prosecution; or identifying threats to the national security. 


(U) The investigation of threats to the national security may constitute an exercise of the FBI’s 

_ criminal investigation-authority as well as its authority to investigate-threats to the national 
security. As-with criminal investigations, detecting and solving crimes and arresting and 
prosecuting the perpetrators are likely objectives of investigations relating to threats.to the 
national security. These investigations, however, serve important purposes outside the ambit of 
normal criminal investigations, by providing the basis for decisions concerning other measures 
needed to protect.the national security. 


6.3.. (U) Civil Liberties and Privacy 


(U) The pursuit of legitimate investigative goals without infringing upon the exercise of 
constitutional freedoms is a challenge that the FBI meets through the application of sound 
judgment and discretion. In order to further ensure that civil liberties are not underminėd by the 
conduct of criminal and national security investigations, every preliminary investigation under 
this subsection must haye an identified authorized puipose and adequate predication. 


(U) No investigative activity, including preliminary investigations, may be taken solely on the 
basis of activities that are protected by the First Amendment of on the race, ethnicity, national 
origin or religion of the subject. Preliminary investigations of individuals, groups or 
organizations must focus on activities related to the threats and or crimes being investigated, not 
solely-on First Amendment activities or on the race, ethnicity, national origin or religion of the 
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subject. In this context, it is particularly important clearly to identify and document the law 
enforcement or national security basis of the preliminary investigation. 


(U) Example: Individuals or groups who communicate with each other or 
with members of the public in any form in pursuit of social or political 
causes—such as opposing war or foreign policy, protesting government 
actions, promoting certain religious. beliefs, championing particular local, 
national, or international causes, or a change in government through non- 
criminal means, and actively recruit others to join their causes—havé a 
fundamental constitutional right to do so. A preliminary investigation may not 
be initiated based solely on the exercise of these First Amendment rights. 


(U) The AGG-Dom present investigators with a number of authorized investigative methods in 
‘the conduct of a preliminary investigation. Considering the effect on the privacy and civil 
liberties of individuals and the potential to damage the reputation of individuals, some of these 
investigative methods are more intrusive than others. The least intrusive method feasible is to be 
used, but the FBI must not hesitate to use any lawful method consistent with the AGG-Dom. A 
more intrusive method may be warranted in'light of the seriousness of a criminal or national 
security threat. - - z - 


(U) By emphasizing the use of the least intrusive means to obtain intelligence and/or evidence, 
FBI employees can effectively execute their duties while mitigating the potential negative impact 
on the privacy and civil liberties of-all people encompassed within the investigation, including 
targets, witnesses, and victims. This principle is not intended to discourage FBI employees from : 
seeking relevant and necessary intelligence, information, or evidence, but rather is intended to 
encourage FBI employees to.choosé the least intrusive—but still effective means—from the 
available options to obtain the-material. 


6.4. (U) Legal Authority 
A. (U) Criminal Investigations 


(U) The FBI has statutory authority to investigate'all federal crime not assigned exclusively: 
to another federal agency. (See.28 U.S.C..§ 533; 18 U.S.C. § 3052; 28 C.F.R. § 0.85 [1]) 


(U) The FBI also has special investigative jurisdiction to investigate violations of state law in 
limited circumstances. Specifically, the FBI has jurisdiction to investigate felony killings of 
state law enforcement officers (28 U.S.C. § 540), violent crimes against interstate travelers 
(28 U.S.C. § 540A), and serial killers (28 U.S.C.. § 540B). Authority to investigate these 
matters is contingent on receiving a request by an appropriate state official. 


B. (U) Threats to the National Security 


(U) The FBI has authority to investigate threats to the national security pursuant to executive 
orders, Attorney General authorities, and various statutory sources. (See E.O. 12333; 50 
U.S.C. §§ 401 et seq.; 50 U.S.C. §§ 1801 et seq.) 


. (U) “Threats to the national security” are specifically defined to mean: international terrorism; 
espionage and other intelligence activities, sabotage, and assassination, conducted by, for, or 
on behalf of foreign powers, organizations, or persons; foreign computer intrusion; and other 
matters determined by the Attorney General, consistent with Executive Order 12333 or any 
successor order. (AGG-Dom, Part VII.S) 
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6.5. (U) Predication 


o p E a MeeR i 
(U) A preliminary investigation may be initiated on the basis of “information or an allegation” 
indicating the existence of'a circumstance described as follows: 


tgs ta, 


A. (U) An activity constituting a federal crime or a threat to the national security has or may 
have occurred, is or may-be occurring, or will or may occur and the investigation may 
obtain information relating to the activity or the involvement or role of an individual, group, 
or organization in.such activity. (AGG-Dom, Part II.B.3) 


B. (U) Anindividual, group, organization, entity, information, property, or activity is or may 
be a target of attack, victimization, acquisition, infiltration, or recruitment in connection 
with criminal activity in violation of federal law or a threat to the national security: and the 
investigation may’ obtain information that would help to protect against such-activity or 
threat. (AGG-Dom, Part IT.B.3) 


ov ooo 


(i) (UFOUO oS S o OUO 






-b2. 
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6.6. (U//FOUO) Standards for Initiating or Approving:a Preliminary Investigation 


(U) Before initiating or approving the conduct of a preliminary investigation, an FBI employee 
or approving official must determine whether: 


A. (U//FOUO) An authorized ‘purpose and adequate predication exist for initiating a 
preliminary investigation; 


B. (U//FOUO) The preliminary. investigation is not based solely on the exercise of First 


Amendment activities or on the racé, ethnicity, national origin or religion of the subject; 
and 


C. (U//FQUO) The preliminary investigation is an appropriate use of personnel arid financial 
resources. 


6.7. (U) Duration, Approval, Notice, Documentation and File Review 


A. (U//FQUO) Initiation: The purpose. of and predication for a preliminary investigation must 
be documented: in the initiating EC. The effective date of the preliminary investigation is 
the date the final approval authority (e.g., SSA or SAC) approves the EC.. 


1. (U//FOUO) The initiation of a preliminary investigation. by the Field Office requires 
prior approval of the SSA. FBIHQ Division policy implementation guides may require 
written notification to the appropriate FBINQ Unit and Section. The initiation of a 
preliminary investigation does not require F BIHQ and DOJ notification-unless the 
preliminary investigation involves a sensitive investigative matter as discussed in 
paragraph 3, below. 
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2. (U/FOUO) The initiation of a preliminary investigation by FBIHQ. requires prior © 
approval of the Unit Chief with written notification to the applicable Field Office. The 
initiation of a preliminary investigation does:not require DOJ notification unless the 
preliminary investigation involves a sensitive investigative matter as discussed in 
paragraph 3, below. 


3. (U//FOUO) Sensitive Investigative Matter: The initiation of a preliminary 
investigation involving a sensitive investigative matter: : 
a. (U//FOUO) Initiated by a Field Office: requires CDC review, SAC approval, 
„and written notification to the appropriate FBIHQ Unit Chief and.Section Chief. 
Additionally, written notification must be made by the Field Office to the United 
States Attorney or by the appropriate. FBIHQ Section to the DOJ Criminal b2 
Division or NSD as soon as practicable but.in all events no later than 30 calendar b7E 
days after the initiation of ¢ an investisati 















cease approval is acquired and notice is furnished as 
specified above. TA gy ee . 
b. (U//FOUO) Initiated by FBIHQ: requires OGC review, Section Chief approval, 
and written notification to the United States Attorney and the appropriate Field 
Office or the DOJ Criminal Division or NSD as soon as practicable but in all 
_events-no later than 30 calendar days after the initiation of such.an investigation. 











must cease until OGC review and Section © 
Chief approval is acquired and notice is furnished as specified above. (AGG-Dom, 
Part 11.B.5.a) 


4. (U//FOUO) The Executive Assistant Director (EAD) for the National Security Branch 
must notify the Deputy Attorney General if FBI Headquarters disapproves:a Field 
Office’s initiation of a preliminary investigation relating to,a threat to the national 

. security on the ground that the predication for the invéstigation is insufficient, and the 
EAD for the National Security Branch is responsible for establishing a system that will 
allow for the prompt retrieval of such denials. (AGG-Don, Part II.B.5.d) ‘ 


B. (U//F QUO) Extension: A preliminary investigation must be concluded within six months: 
of its initiation but:may be‘extended for up to six months by the SAC. This extension 


authority may not be delegated by the SAC to the ASAC; Extensions of preliminary be 
investigations beyond a year are discouraged and may only be approved by the appropriate BIE 
_FBIHQ Unit and Section for “good cause.” (AGG-Dom, Part I B.4.2.ii) Note: 








(U//F QUO) The following factors must be used to determine if “good Gause” exists to 
extend the preliminary investigation beyond one year: 
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¢ (U//FOUO) Whether logical investigative.steps have yielded information that 
tends to inculpate or exculpate the subject; 


° (U//FOUO) The progress that has been made toward determining whether a full 
investigation should be opened or the preliminary investigation should be closed; 


‘@ (U//FOUO) Whether, based on the planned course of investigation for the 
following six months, it is reasonably likely that information will be obtained that 
will lead to predication for a full investigation, thereby warranting an extension 
for another six months, or will lead to exculpatory information, thereby 
warranting closing the preliminary investigation; and 


e (U//FOUO) Whether adequate. predication has been developed to justify opening a 
full investigation or whether sufficient information has been developed that justify 
closing the preliminary investigation. 


- (U//FOUO) Closing: When closing a preliminary investigation, the Field ‘Office or FBIHQ 


will provide the reason for closing the.investigation. When closing a preliminary 

investigation, the SSA or Unit Chief must ensure that all pending investigative methods 

‘have been completed/terminated (e.g., mail covers and pen register/trap and tracé). 

1.. (U//FOUO) Clošinġ à přelimina iated by-a Fi 
approval from the SSA. 


-investisation‘i 





l 2. (U//FOUO) Closing a preliminary investigation initiated by FBIHQ requires approval 


from the Unit Chief and notification to the appropriate Field Office. 


3. (U//FOUO) Closing a preliminary investigation initiated by a Field Office involving a 
sensitive investigative matter requires approval from the oe 
eee eee 


4. (U//FOUO) Closing a preliminary investigation initiated by FBIHQ involving a 


sensitive investigative matter ine a from the Section Chief  ] 


. (U//FOUO) Conversion: When converting a preliminary investigation to a-full 


investigation, see Section 7. for approval and notification requirements. 


. (U//FOUC) File Review: Supervisory file reviews must be conducted at least once every 
* 90 days in accordance with Section 3.4. File reviews for probationary FBI employees must 


be conducted at least every 60 days. 


(U//FOUO) Standards for. Initiating or Approving the Use of an Authorized 
Investigative Method 


(U//FOUO) Prior to initiating or approving the use of an investigative method, an FBI employee 
or approving official must determine whether: 


A. (U//FOUO) The use of the particular investigative method is likely to further the purpose of 
`- the preliminary investigation; 





B. (U//FOUO) The investigative method selected is the least intrusive method, reasonable under 
the circumstances; and 
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C. (U//FOUO) The method to be used is an appropriate use of personnel and financial resources. 
6.9., (U) Authorized Investigative Methods in Preliminary Investigations 


A. (U) All lawful methods may be used in a-preliminary investigation, except for mail opening, 
physical search requiring-a Federal Rules of Criminal Procedure (FCRP) Rule 4] search 
warrant or a FISA order, electronic surveillance requiring a judicial order or warrant, or Title 
VII FISA requests. Authorized methods include, but are not limited to, those listed below: 
Some of the methods listed are subject to special restrictions or review or approval. 
requirements. (AGG-Dom, Part V.4.A) 


B. (U//FOUO) A complete discussion of the investigative methods, including approval 
requirements, is contained in Sections 5 and 11. The use or dissemination of information 
obtained by the use of the below methods must comply-with the AGG-Dom and DIOG 
Section 14. 


1. (U) Obtain publicly available information. 


2., (U) Access and examine FBI and other DOJ records, and obtain information from an 
FBI or other DOJ personnel. 


3. (U) Access and examine records maintained by. and request information from, other 


federal. state. loéal. or tribal. or foreign:governmental entities-or agencies. 


(U) Use online services and resources (whether non-profit or commercial). 


(U) Use and recruit human sources in conformity with the AGG-CHS. 

(U) Interview or request information from members of the public and private entities. 
(U) Accept information voluntarily provided by governmental or private entities. 

(U) Engage in observation or surveillance not requiring a court order, 

(U) Grand Jury Subpoenas for telephone or electronic mail subscriber information (see 


also number 16, below). 
10. (U) Mail covers. (AGG-Dom, Part V.A.2) 


T1. (U) Physical searches of personal or real-property where a warrant or court order is not 


egally required because there is no reasonable expectation. of privac (e.g., open fields, 
trash covers)..(AGG-Dom, Part V.A.3) 


SOS SON = 


12. (U) Consensual monitoring of communications, including consensual computer 
monitoring, subject to legal review by the CDC or the FBI OGC. When a sensitive 
monitoring circumstarice is involved, the-monitoring must be approved by the DOJ 
Criminal Division or, if the investigation concerns a threat to the national security, by the 


DOJ NSD. (AGG-Dom, Part V.A.4) Sensitive monitoring circumstances include: 


a. (U) Investigation of a member of Congress, a federal judge, a member of the 
Executive Branch at Executive Level-IV or above, or a person who has served in such 


capacity within.the previous two years (Executive Level I through IV are defined in 5 
U.S.C. §§ 5312-5315); 


b. (U) Investigation of the Governor, Lieutenant Governor, or Attorney General of any 
state or territory, or a judge or justice of the highest court of any state or territory, 
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concerning an offense involving bribery, conflict of interest, or.extortion related to 
the performance of official duties; å 


c. (U) A party to the communication is in the custody of the Bureau of Prisons or the 
United States Marshal Service or is being or has been afforded protection in the 
Witness Security Program; or ; 


d: (U) The Attorney General, the Deputy Attorney General, or an Assistant Attorney 
General has requested that the FBI obtain prior approval for the use of consensual 
monitoring in a specific investigation. (AGG-Dom, Part VII.A and O) 


(U//FOUO) Note: See classified appendix for additional information. 


UI a a 


13. (U) Use of closed-circuit television, direction finders. and other monitoring devices, 
subject to legal review by the CDC or the FBI OGC. (The methods described in this 


paragraph usually do not require a court order or warrant unless they involve an intrusion 
into an area where there is a reasonable expectation of privacy or non-consensual 
monitoring of communications, but legal review is hecessary to ensure compliance with 
all applicable legal requirements.) (AGG-Dom, Part.V.A.5) 


14. (U) Polygraph examinations. (AGG-Dom, Part V.A.6) 


15. (U) Undercover. operations. In investigations relating to activities in violation of federal 
criminal law that do not concern threats to the national. security or foreign intelligence, 
undercover operations must be carried out in conformity with The Attorney General’s 
Guidelines on Federal Bureau of Investigation Undercover Operations. Investigations 
that are not subject to the preceding sentencé because they concern threats to the national 

security or-foreign intelligence undercover operations involving religious or political 
Organizations must be reviewed and approved by FBL Headquarters, with participation by 
the DOJ NSD in the review process. (AGG-Dom, Part V.A.7) : 


16. (U) Compulsory. process as authorized by law. including grand jury subpoenas and other 
subpoenas. National Security Letters (15 U.S.C. §§ 1681u, 1681v; 18 U.S.C. § 2709; 12 
USS.C. § 3414 fa][S][A]; 50 U.S.C. § 436); and FISA orders for the production of tangible 
things. (50 U.S.C. §§ 1861-63). (AGG-Dom, Part V.A.8) 


17. (U) Accessing stored wire and electronic communications and transactional records in 
conformity with chapter 121 of title 18, United States Code (18 U.S.C. §§ 2701-2712). 
(AGG-Dom, Part V.A.9) i 


18. (U) Use of pen registers and trap and trace devices in conformity with chapter 206 of title 
18, United States Code (18 U.S.C. §§ 3121-3127) or FISA (50 U.S.C. §§. 1841-1846). 


(AGG-Dom; Part V.A.10) 
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6.10, (U) Sensitive Investigative Matter / Academic Nexus / Buckley Amendment 


(U//FOUO) The title/case caption of thé opening or subsequent EC for a preliminary: 
investigation involving a sensitive investigative matter must contain the words “Sensitive 
Investigative Matter.” DIOG Section 10 contains the required approval authority and factors for 
consideration when determining whether to initiate or approve a predicated investigation 
involving a sensitive investigative matter. gn 


A.. (U//FOUO) Sensitive Investigative Matter: An investigative matter involving the activities 
of a domestic public official or political candidate (involving corruption or a threat to the 
national security), religious or political organization or individual prominent in such an 
organization, or news media, or any other matter which, in the judgment of the official ` 
authorizing an investigation, should-be brought to the attention of FBI Headquarters and 
other DOJ officials. (AGG-Dom, Part VILN.) As a matter of FBI policy, “judgment” means 
that the decision. of the.authorizing official is discretionary. DIOG Section 10 and/or the 
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" B. (U/FOUO) Academie Nexus] 
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(U//FOUO) The sensitivity related to an academic institution arises from the American, 
tradition of “academic freedom” (e.g., anatmosphere in which students and faculty are free 
to express unorthodox ideas and views and to challenge conventional thought without fear ‘of. 
repercussion). Academic freedom does not mean, however, that academic institutions are off 
limits to FBI investigators in pursuit of information or individuals of legitimate investigative 
interest. b2 
b7E 
classified Appendix G. 
C. (U//FOUO) Buckley Amendment: Although not-a sensitive investigative matter, a request 
. for “academic records” must only be made. pursuant to the provisions of the Buckley 
- Amendment (The Family Educational Rights and Privacy. Act of 1974, 20 U.S.C. § 1232[g], 
as amended by Public Law 107-56 {“USA PATRIOT Act”]). An FBI employee is prohibited 
from receiving “academic records” that have not been properly requested pursuant to the 
Buckley Amendment. The definition of “academic records” is very broad and covers almost 
all records about a student other thari public, student directory-type information published by 
the institution. The Buckley Amendment contains a penalty provision for those institutions 
that improperly provide academic records to:law enforcement avencies | _] 
b2 
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A Buckley Amendment request for academic records cannot be made during an assessment. 


In a prédicated investigation, a request for academic records must be made pursuant to the 
Buckley Amendment. , 
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6.11. (U) Program Specific Investigative Requirements 


(U//FOUO) Because of the many investigative programs within the FBI, a single universal 
requirement will not adequately address every program. To facilitate compliance within an 
existing program, the FBI employee should consult the relevant program policy guidance. 
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7. (U) Full Investigations 


7.1. (U) Overview 


(U/FOUO) The AGG-Dom authorizes a second level of investigative activity—predicated 
investigations. Predicated investigations that concern federal crimes or threats to the national 
security are subdivided into. preliminary investigations and full investigations. Full investigations 
may be initiated if there is an “articulable factual basis” of possible criminal or national threat 
activity, as discussed in greater detail in Section 7.5, below. There are three types of full 
investigations: (i) single and multi-subject; (ii) enterprise; and (iil) positive foreign intelligence 
collection. l 

7.2. (U) Purpose and Scope 


(U) Full investigations may be initiated to detect, obtain information about, or prevent or protect 
against federal crimes or threats to the national security or to collect foreign intelligence. 


(U) The objective of.a full investigation includes: determining whether a federal crime is being 
planned, prepared for, occurring or occurred; identifying, locating, and apprehending the 
perpetrators; obtaining evidence for prosecution; identifying threats to the national security; 
investigating-an-enterprise (as-defined in DIOG Section 8); or collecting positive foreigii 
intelligence. i 


(U) The investigation of threats to the national security.can be investigated under both the FBI’s 
criminal investigation authority and its authority to investigate threats to the national security. As 
with criminal investigations, detecting and solving crimes, gathering evidence and arresting and 
prosecuting the perpetrators are frequently the objectives of investigations relating to threats:to 
the national security. These investigations also serve important purposes outside the ambit of’ 


normal criminal investigations, however, by providing the basis for decisions concerning other 
measures needed to protect the national security. 


(UMROUO) ooo o 
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(U//FOUO) A full investigation solely for the collection of positive foreign intelligence extends 
the sphere of the FBI’s information gathering activities beyond federal crimes and threats to the 
national security and permits the FBI to seek information regarding a broader.range of matters 
relating to foreign powers, organizations, or persons that may be of intérest to the conduct of the 
United States’ foreign affairs. (See DIOG Section 9) 


7.3. (U) Civil Liberties and Privacy 


(U) The pursuit of legitimate investigative goals without infringing upon the exercise of 
constitutional freedoms is a challenge that the FBI meets through the application of sound 
judgment and discretion. In order to further ensure that civil liberties are not undermined by the 
conduct of criminal and national security investigations, every full investigation under this 
subsection must have an identified authorized purpose and adequate predication. 


` 
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(U) No investigative activity, including full investigations, may be taken solely on the basis of 
activities that are protected by the First Amendment or on the race, ethnicity, national origin or 
religion of the subject. Full investigations of individuals, groups or organizations must focus on 
activities related to the threats or crimes being investigated, not solely on First Amendment 
activities or'on the race, ethnicity, national origin or religion of the subject. In this context, it-is 
particularly important clearly to identify and document the law enforcement.or national security 
basis of the full investigation: 


(U) Example: Individuals or groups who communicate with each other or 
with members. of thé public in any form in pursuit of social or political 
causes—such as opposing ‘war or foreign policy, protesting government 
actions, promoting certain: religious beliefs, championing particular local, 
national, or international causes, or a change in government through non- 
criminal means, and actively recruit others to join their causes—have a 
fundamental constitutional right to do so. A full investigation may not be 
initiated based.solely on the exercise of these First Amendment rights. 


(U) The AGG-Dom authorize all lawful investigative methods in the conduct of a full 
itivéstigation. Corisidering the effect-on-the privacy-and:-civil liberties:of individuals and-the: - 
potential to damage the reputation of individuals, some of these investigative methods are more 
intrusive than others. The least intrusive method feasible is to be used, but the FBI must not 
hesitate to use any lawful method consistent with the AGG-Dom. A more intrusive method may 
be warranted in light of the seriousness of a criminal or national security threat or the importance 


of a foreign intelligence requirement. i : 


(U) By emphasizing the use of the least intrusive means to obtain intelligence or evidence, FBI 
employees can effectively execute their duties while mitigating the potential negative impact on. 
the privacy and civil liberties of all people encompassed within the investigation, including 
targets, ‘witnesses, and victims. This principle is not intended to discourage FBI employees from 
seeking relevant and necessary intelligence, information, or evidence, but rather is intended to 
encourage FBI employees to choose the least intrusive—but still effective means—from the 
available options to obtain the material. . 


- (U) Because-the authority to.collect positive foreign intelligence enables the FBI to obtain 
information pertinent to the United States’ conduct of its foreign affairs, even if that information 
is not related to criminal activity or threats to the national security, the information gathered may 
concern lawful activities. The FBI must accordingly operate openly and consensually with a 
United States person to the extent practicable when collecting positive foreign intelligence that 
does not concern criminal activities or threats to the national security. 


7.4. (U) Legal Authority 
A. (U) Criminal Investigations 


(U), The FBI has statutory authority to investigate all federal crime not assigned exclusively 
‘to another federal agency. (See 28 U.S.C. § 533; 18 U.S.C. § 3052; 28 C.F.R. § 0.85 [1].) 


(U) The FBI also has special irivestigative jurisdiction to investigate violations of state law in - 
limited circumstances. Specifically, the FBI has jurisdiction to investigate felony killings of 
state law. enforcement officers (28 U.S.C. § 540), violent crimes against interstate travelers 
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(28 U.S.C. § 540A), and serial killers (28 U.S.C. § 540B). Authority to investigate these 
matters is contingent on receiving a request by an appropriate state official. 


B. (U) Threats to the National Security 


(U) The FBI has authority to investigate threats to the national security pursuant to executive 
orders, Attorney General authorities, and various statutory: sources, (See E.O. 12333; 50 
U.S.C. §§ 401 et seq.; 50 U.S.C. §§ 1801 et seq.) 


(U) “Threats to the national security” are specifically defined to mean: international terrorism; 
espionage and other intelligence activities, sabotage, and assassination, conducted by, for, or 
on behalf of foreign powers, organizations, or persons; foreign computer intrusion; and other 
matters determined by the Attorney General, consistent with Executive Order 12333 or any 
successor order. (AGG-Dom, Part VII.S) 


C. (U) Foreign Intelligence Collection 


(U) The FBI authority to collect foreign intelligence derives from a mixture of administrative 
and statutory sources. (See E.O. 12333; 50 ULS.C. §§ 401 et seq.; 50 U.S.C. §§ 1801 et seq.; 


28 U.S.C. § 532 note (incorporates the Intelligence Reform and Terrorism Protection Act, 
P.L. 108-458 §§ 2001-2003). ` 


(U) “Foreign Intelligence” is defined as information relating to the capabilities, intentions, or 
activities of foreign governments or elements thereof, foreign organizations or foreign 
persons, or international terrorists. (AGG-Dom, Part VILE) 


7.5. (U) Predication 


(U) A full investigation may be initiated if.there is an “articulable factual basis” that reasonably 
indicates onè of the following circumstances exists: 





A. (U) An activity constituting a'federal crime or a threat to, the national security-has or.may 
have occurred, is or may be occurring, or'will or may occur and the investigation may obtain 
information relating to the activity or the involvement or role of an individual, group, or 
organization in such activity. 


B. (U) An individual, group, organization, entity, information, property, or activity is or may be 
a target of attack, victimization, acquisition, infiltration, or recruitment in connection with 
criminal activity in violation of federal law or a threat to the national security and the 
investigation may obtain information that would help to protect against such activity or threat. 


C. (U).The investigation may obtain foreign intelligence that is responsive to a Positive Foreign 
Intelligence Requirement, as defined in DIOG Section 7.4.C. 


eS ee 
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7.6. (U/FOUO) Standards for Initiating or Approving a Full Investigation 


(U//FOUO) Before initiating or approving the conduct of a full investigation, an FBI employèe 
or approving official must determine whether: ` 


A. (U//FOUO) An authorized purpose.and adequate predication exist for initiating a:full 
investigation; . 


B. (U//FOUO) The full investigation is based on factors other than the exercise of First 
Amendment activities or the race, ethnicity, national origin or religion of the subject; arid 


~C. (U/FOUO) The full investigation is an appropriate use of personnel:and financial resources. 
7.7. (U) Duration, Approval, Notice, Documentation and File Review - 


A. (U//FOUO) Initiation: The.purpose of and predication for a full-investigation must be 
documented in the initiating EC. The effective date of the full investigation is the date the 
final approval authority (e.g., SSA or SAC) approves the EC. ` 


1. (U//FOUO) By a Field Office: The initiation of a full investigation for circumstances 
described in Sections’7.5.A atid 7.5:B by a Field Office requires prior approval of the 
SSA with written notification to the appropriate FBIHQ substantive Unit. The initiation 
of a full investigation of a United States person relating to a threat to the national: l 
security for circumstances described in Sections 7.5.A and 7.5.B requires the approval 
of the Field Office SSA with written notification to the appropriate FBIHQ substantive 
Unit. The FBIHQ substantive Unit must notify DOJ NSD as soon as practiċable but in 
all events within 30 calendar days after the initiation of the investigation. 


2. (U//FOUO) By FBIHQ: The initiation of a full investigation for circumstances 
described in Sections.7.5.A and 7.5.B by FBIHQ requires prior approval of the Unit 
Chief with written notification to the appropriate Field Office. The initiation ofa full 
investigation by FBIHQ of a United States person relating to a threat to the national 
security for circumstances described in Sections 7.5.A and 7.5.B requires the approval 
of the Unit Chief with written notification to the appropriate-Field Office and notice to 


DOJ NSD as soon as practicable but in all events within 30 days after initiation of the 
investigation. , 


3. (U//FOUO) Sensitive Investigative Matter: The initiation of.a full investigation 
involving a Sensitive investigative matter: 


a. (U//FOUO) By a Field Office: requires CDC review, SAC approval, and written 
notification to the appropriate FBIHQ substantive Unit Chief and Section Chief. 
Additionally, the Field Office must notify, in writing, the United States Attorney, 
if required. The appropriate FBIHQ Section must notify, in writing, the DOJ 
Criminal Division or NSD as soon as practicable, but no later than 30 calendar 
days after the initiation of the investigation. The notice must identify all known 
sensitive investigative matters involved in.the investigation (see classified 
appendix for additional notice requirements). If a sensitive investigative matter 
arises after the initiation of a full investigation, investigative activity -must cease 
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until CDC review and SAC approval are acquired and notice is furnished as 
Specified above. 


b. (U//FOUO) By FBIHQ: requires OGC review, Section Chief approval, and 
written notification tothe United States Attorney and the appropriate Field Office 
or the DOJ Criminal Division or NSD as soon as practicable, but no later than 30 
calendar days after the initiation of such an investigation. The notice must identify" 
all known sensitive investigative matters involved:in the investigation (see 
classified appendix for additional notice requirements). If a sensitiveinvestigative 
matter arises after the-initiation of a full investigation, investigative activity must 
cease until OGC review and Section Chief approval are acquired and notice is 
furnished:as specified above. (AGG-Dom, Part II.B.5.a) 


(U//FOUO) The initiation of a full investigation in order to collect positive foreign 
intelligence must be approved as provided in Section 9. Additionally, written 
notification to. FBIHQ CMS and DOJ NSD is required as soon as practicable but no 
later than 30 calendar days after the initiation of the investigation. 


(U//FOUO) The-EAD for the National Security Branch must notify the Deputy 


Attorney General if FBI Headquarters disapproves a Field Office’s initiation of a full 


investigation relating-to-a threat to the national security-on-thé-ground that the - 
predication for the investigation jis insufficient, and the EAD for the National Security 
Branch is responsible for establishing a system that will allow for the prompt retrieval 
of such denials. (AGG-Dom, Part I1.B.5.d) 


B. (U//FOUO) Closing: When closing the full investigation, the Field Office or FBIHQ will 
provide the reason for closing the investigation. When closing a full investigation, the SSA or 
Unit Chief must ensure-that all pending investigative methods have been. completed/ 
terminated (e.g., mail covers and pen.register/trap and trace). Although there is no duration 
requirement for.a full:investigation, the investigation must be closed upon all investigative 
activity being exhausted. 


1. 


(U/FOUO) Closing a full investigation initiated by a Field Office requires approval 
from the SSA. Notification to the substantive FBIHQ Unit may be required by program 
policy. ie 
(U//FOUO) Closing a full investigation initiated. by FBIHQ requires approval from the 
Unit Chief and notification to the appropriate Field Office. 


(U//FOUO) Closing a full investigation initiated by a Field Office involving a sensitive 
investigative matter requires approval from the SAC and-written notification to-the 
FBIHQ substantive. Unit and Section. 


(U//FOUO) Closing a full investigation initiated by FBIHQ involving a sensitive. 
investigative matter requires approval from the Section Chief and written notification to 
the appropriate Field Office. 


(U//FOUO) Closing a full ‘investigation for the purpose of positive foreign intelligence 
collection requires the approval of FBIHQ CMS. 5 
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C. (U//FOUO) File Review: Supervisory file reviews must be conducted at least once every 90 
days in accordance with Section 3.4. File reviews for probationary FBI employees must be 
conducted at least every 60 days. 


D. (U//FOUO) Annual Letterhead Memorandum: An 


nual letterhead memoranda regarding 
the status of full investigations are not requir ¢ m: howeve 


A - 
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7.8. (U//FOUO) Standards for Initiating or Approving the Use of an Authorized 
Investigative Method 


(U//FOUO) Prior to initiating or approving the use of an investigative method, an FBI.employee 
or approving official must determine whether: i 


_ A. (U//FOUO) The use’of the particular investigative method is likely to further the purpose of 
the full investigation; 


B. (U//FOUO) The investigative method selected is the least intrusive method, reasonable.under 
the circumstances; 


C. (U//FOUO) If the full investigation is for collecting positive foreign intelligence, the FBI 
must-operate openly: and consensually with a United States person, to the extent practicable; 
and bo 

D. (U//FOUO) The method to be used is an appropriate use of personnel and financial resources. 

7.9. (U) Authorized Investigative Methods in Full Investigations 


(U),All lawful methods may be used in a full investigation, unless the invéstigation is to collect 
foreign intelligence. The use or dissemination of information obtained by the use of these 
methods must comply with the AGG-Dom and DIOG Section 14..See foreign intelligence 
collection Section 9 for more information regarding use of authorized investigative methods.. 


A. (U) Obtain publicly available information. : ‘ 
B. (U) Access and examine FBI and other DOJ records. and obtain information from any FBI or 
other DOJ personnel 


p : 


C: (U) Access and examine records maintained by. and request information from. other federal, 
state, local. or tribal. or foreign governmental entities or agencies.. 


D. (U) Use online services and resources (whether non-profit or commercial). 

E. (U) Use and recruit human sources in conformity with the AGG-CHS, 

F. (U) Interview or request information from members of the public and private entities. 

G. (U)-Accept information voluntarily provided by governmental or private entities, 

‘H. (U) Engage in observation or surveillance not requiring a court order. 

I. (QU) Grand Jury Subpoenas for telephone or electronic mail subscriber information (see also ` 
‘p? z 


below). 
J. (U) Mail covers. (AGG-Dom, Part V.A.2) 
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: ic h rsong real prof a a i 
legally required because there is no reasonable expectation of privacy (e.g., trash covers), 
(AGG-Dom, Part V.A.3) . 


L. (U) Consensual monitoring of communications, including consensual computer monitoring, 


subject to legal review by the CDC or the FBI OGC. When a sensitive monitoring 
circumstance is involved, the monitoring must be approved by the DOJ Criminal Division or, 
if the investigation concerns a threat to the national security, by the DOJ NSD. (AGG-Dom, 
Part V.A.4) ' 


(U) Sensitive monitoring circumstances include: 





> 


I. (U) Investigation ofa member of Congress, a federal judge, a member of the 
Executive Branch at Executive Level IV or above, or a person who has served in such 
capacity within the previous two years (Executive Level I through-IV are defined in 5 
U.S.C. §§ 5312-5315); ; , 


2. (U) Investigation of the Governor, ‘Lieutenant: Governor, or Attorney General of any 
state or territory, or a judge or justice of the highest court of ary state or territory, 
concerning an offense involving bribery, conflict of interest, or extortion related to 
the performance of official duties; 

3. (U)A party to the communication is in the custody of the Bureau of Prisons or the 
United States Marshal Service or is being or has been afforded protection in the 
Witness Security Program; or 


4. (U) The Attorney General, the Deputy Attorney General, or an Assistant Attorney 
General has requested that the FBI obtain prior approval for the use of consensual ` 
monitoring in a specific investigation. (AGG-Dom, Part VII.A ‘and QO) 


(U//FOUO) Note: See classified appendix for additional information. 


(U//FOUO) Note: For those State, local and tribal governments that do not sanction or 
provide a law. enforcement exception available to the FBI for one-party consensual recording 
of communications with persons within their jurisdiction, the SAC must approve the 
consensual monitoring of communications as an OIA, as discussed in Section 17. Prior to the 
SAC. authorizing the OIA, one-party consent must be-acquired. The SAC may delegate this 
OIA approval authority to an ASAC or SSA. 


M. (U) Use of closed-circuit television. direction finders. and other monitoring devices, subject 
to legal review by the CDC or the FBI OGC. (The methods described in this paragraph 
usually do not require-a court order or warrant unless they involve an intrusion into an area 
where there is a reasonable expectation of privacy or non-consensual monitoring of 


communications; but legal review is necessary to ensure compliance with all applicable legal 
requirements.) (AGG-Dom, Part V.A.5) í 


N, (U) Polygraph examinations. (AGG-Dom, Part V.A.6) 


O. (U) Undercover operations. In investigations relating to activities in violation of federal 
‘criminal law that do not concern.threats to the national security or foreign intelligence, 
undercover operations must be carried out in conformity with The Attorney General's 
uidelines on Federal Bureau of Investigation Undercover Operations. Investigations that 
are not subject to the preceding sentence because they concern threats to the national security 
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or foreign intelligence undercover operations involving religious or political organizations 
must be reviewed and approved by FBI Headquarters, with participation by the DOJ NSD in 
the review process. (AGG-Dom, Part V.A.7) 


P. (U) Compulsory process as authorized by law. including grand jury subpoenas and other 

~ subpoenas, National Security Letters (15 U.S.C. §§ 1681u, 1681v; 18 U.S.C. § 2709; 12 
U.S.C. § 3414[a][5][A]; 50 U.S.C. § 436), and FISA orders for the production of pae 
things. (50 U.S.C. §§ 1861-63). (AGG-Dom, Part V.A.8) 


Q. (U) Accessing stored wire and electronic communications and transactional records i in 
conformity with chapter 121.of title 18, United States Code (18 U.S.C. 38 2701-2712). 
(AGG-Dom, Part V.A.9) 


R. (U)-Use of pen registers and trap and trace devices in conformity with chapter 206 of title 18, 
United States Code (18 U.S.C. §§ 3121-3127) or FISA (50 U.S. C. §§ 1841-1846). (AGG- 
Dom, Part V.A.10) 


(U) The following investigative methods can only be used in full investigations: 


S. (U) Electronic surveillance in conformity with chapter 119 of Title 18, United States Code 
(18 U:S:C. §§ 2510-2522), FISA, or Executive Order 12333 § 2.5. (AGG- Dom, Part V.A. 11) 


T. (U) Physical searches, including mail openings, in conformity with Rule 41 of the Federal ~ 
Rules of Criminal Procedure, FISA, or Executive Order 12333 § 2.5. The classified appendix 
to the DIOG, Appendix G, provides additional informatia regarding certain searches. 
(AGG-Don, Part V.A.12) ; 


U. (U) Acquisition of foreign intelligence information in conformity with Title Vil of FISA. 
(AGG-Dom, Part V.A.13) 


7.10. (U) Sensitive Investigative Matter / Academic Nexus / Buckley Amendment 


(U//FOUO) The title/case caption of the opening or subsequent EC for a full investigation 
involving a sensitive investigative matter must contain the words “Sensitive Investigative 
Matter.” DIOG Section:10 contains the réquired approval authority and factors to be considered 
when determining.whether to conduct or to approve a predicated investigation involving a 
sensitive-investigative matter. The AGG-Dom defines sensitive investigative matter as follows: 


A. (U//FOUO) Sensitive Investigative Matter: An-investigative matter involving the activities 
of a domestic public official or political candidate.(involving corruption or a threat to the 
national security), religious or political organization or individual prominent in such an 
organization, or news media, or any other matter which, in the judgment of the official - 
authorizing an investigation, should be brought to the.attention of FBI Headquarters and 
other DOJ officials. (AGG-Dom, Part VII-N). As a matter of FBI policy, “judgment” means 
that the decision of the authorizing official is discretionary. DIOG Section 10. and/or the 
DIOG classified Appendix G-define domestic public official, political candidate, religious or 
political organization or individual prominent in such an organization, and news media. 

U//FOUO) Academic Nexus: as 
b7E 
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(U//FOUO) The sensitivity related to an academic institution arises from the American 
tradition of “academic freedom” (e.g., an atmosphere in which students and faculty are free b2 
to express unorthodox ideas and views and to challenge conventional thought without fearof 75 


repercussion). Academic freedom does not mean,.however, that academic institutions are off 


limits to FBI investigators in pursuit of information or individuals of legitimate investigative 
interest. ` 


(U//F auo) For matters not considered a sensitive investigative matter — —— —] 


see the DIOG classified Appendix G. 





C. (U//FOUO) Buckley Amendment: Although not a sensitive investigative matter, a request 
for “academic records” must only be made pursuant to the provisions of the Buckley 
Amendment (The Family Educational Rights and Privacy Act of 1974, 20 U.S.C. § 1232[g], 
as amended by Public Law 107-56 [“USA PATRIOT Act”]). An FBI employee is prohibited 
from receiving “academic records” that have not been properly requested pursuant to the 
Buckley Amendment. The definition of “academic records” is very broad and covers almost 
all.records about a student other than public, student directory-type information published by 
the institution. The Buckley Amendment contains a penalty provision for those institutions 


that improperly provide academic records to law enforcement agencies| 1 _ b2 


‘(U//FOUO) A Buckley Amendment request for academic records cannot be made-during an 
assessment. In a predicated investigation, a request for academic records must be made 
pursuant to the Buckley Amendment. 


7.11. (U) Program Specific Investigative Requirements 


(U//FOUO) Because of the many investigative programs within the FBI, a single universal 
requirement will not adequately address every program. To facilitate compliance within an 
existing program, the FBI employee should consult the relevant program policy guidance. 
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8. (U) Enterprise Investigations 


8.1. (U) Overview 


(U).Enterprise investigations may only be opened and operated as full investigations and are 
subject to the same requirements that apply to full investigations described in Section: 7. 
Enterprise investigations focus on groups or organizations that may be involved in the.most 
serious criminal or national security threats to the public, as described in Section 8.5 below. 
Enterprise investigations cannot be conducted as preliminary investigations-or assessments, nor , 
may they be conducted for the sole purpose of collecting positive foreign intelligence. See 
Section 8.2, below, regarding preliminary investigations and assessments. 


8.2. (U) Purpose, Scope and Definitions 


(U) The term “enterprise” ‘iricludes any partnership, corporation, association, or other legal entity, 
and any union or group of individuals associated in fact, although not-a legal entity. The purpose 
of an enterprise investigation is to examine the Structure, scope, and nature of the group or 
organization including: its relationship, if any,.to a foreign power; the identity and relationship of 
its members, employees, or other persons who may be acting in furtherance of its objectives; its 
finances and resoutces;.its- geographical dimensions;-its past and-future-activities and goals; and- 
its capacity for harm. (AGG-Dom, Part II.C.2) ` 


(U//FOUO) Although an enterprise investigation may not be conducted as a’ preliminary 
. investigation, a preliminary investigation may be used to determine whether a group or ° 
organization is a criminal or terrorist enterprise if the FBI has “information or an allegation” that 
an activity constituting a federal crime or a threat to the national security has or may have 
occurred, is or may be occurring, or will or may occur, and the investigation may obtain 
information relating to the activity of the group or organization in such activity. An assessment 
may also be initiated to determine whether a group or organization is involved in activities 
constituting violations of federal criminal law or threats to the national. security. 


8.3. (U) Civil Liberties and Privacy: 
(U) The pursuit of legitimate investigative goals without infringing upon the exercise of 
constitutional freedoms is a challenge that the FBI meets through the application of sound 
judgment and discretion. In order to further ensure that civil liberties are not undermined by the 


conduct of criminal and national security investigations, every full investigation, including an 


enterprise investigation under this subsection, must have an identified authorized purpose and 
adequate predication. 


(U) No investigative activity, including enterprise investigations, may be taken solely on the 
basis of activities that are ‘protected by the First Amendment or on the racé, ethnicity; national 
origin or religion of the subject. Enterprise investigations of groups and organizations must focus 
on activities related to the threats or crimes being investigated, not solely on First Amendment 
activities or on the race, ethnicity, national origin or religion of the members of the group or 
organization: In this context, it is particularly important clearly to identify and document the law 
enforcement or national security basis of the enterprise investigation. 


(U//FOUO) Example: Groups who communicate with each other or with 
members of the public in any form in pursuit of social or political causes— 
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such as opposing war or foreign policy, protesting government actions, 
promoting certain religious beliefs, championing particular local; national; or 
international causes, or a change in government through non-criminal means, 
‘and actively recruit others. to join their causes—have’.a fundamental 
constitutional right to do so. An enterprise investigation may not be initiated 
‘based solely on the exercise of these First Amendment rights. 


(U) The AGG-Dom authorize all lawful investigative methods in the conduct of an enterprise 
investigation. Considering the effect on the privacy and civil liberties of individuals:and the 
potential to damage the reputation of individuals, some of these investigative methods are more 
intrusive than others. The least intrusive method feasible is to be used, but the FBI must not 
hesitate to use any lawful method consistent with the AGG-Dom. A more intrusive method may 
be-warranted in light of the.seriousness of a criminal or national security threat. 


(U) By emphasizing the use of the least intrusive means to obtain intelligence and/or evidence, 
FBI employees can effectively execute their duties while mitigating the potential negative impact 
on the privacy and civil liberties of all people encompassed within the. investigation, including 
targets, witnesses, and victims. This principle is not intended to discourage FBI employees from 
seeking relevant and necessary intelligence, information, or evidence, but rather is intended to 
encourage FBI employees to choose the least-intrusive—but still effective means—from the _ 
available options to obtain the material. 


8.4. (U) Legal Authority 


(U) A full investigation of a group or organization may be initiated as an enterprise investigation 
if there is an articulable factual basis for the investigation. that reasonably indicates the group or 
organization may have engaged, or may be engaged in, or may have or may be engaged in 
planning. or preparation or provision of support for: (AGG-Dom, Part II.C.1) 


A. (U) A-pattern of racketeering activity as defined in 18 U.S.C. § 1961(5); 


B. (U) International terrorism, as defined in the AGG-Dom, Part VILJ, or other threat to the 
national security; : 





C. (U) Domestic terrorism as defined in 18 U.S:C. § 2331 (5) involving a violation of federal 
criminal. law; 


D. -(U) Furthering political’ or social goals wholly or in part through activities that.involve force 
or. violence and a violation of federal criminal law; or : 


E. (U) An offense.described in 18 US.C. § 2332b(g)(5)(B) or 18 U.S.C. § 43. 
8.5. (U) Predication . 


(U).An enterprise investigation is predicated: when there is an articulable factual basis for the 
investigation that reasonably indicates the group or organization may have engaged or may be 
engaged in, -or may have or may be engaged in, planning or preparation or provision of support 
for the matters identified in Section 8.4, above. 


(U) Thé.“articulable factual basis” for opening an enterprise investigation ismet with the 
identification ofa group whose statements made in furtherance of its objectives, or its conduct, 


‘demonstrate á purpose of committing crimes or securing the commission of crimes by others. 
The group’s activities and statements of its members- may be considered in combination to 
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comprise the “articulable factual basis,” even:if the statements alone or activities alone would not 
warrant such a determination. : 


(U/F OUO) Examples òf situations in which an entėrprise investigation may 
be opened: 


i rovo] oS o o 


b2 
b7E 


iii. 





8.6. (U) Duration, Approval, Notice, Documentation and File Review 
A. (U) Initiation: 


1. (U//FOUO).By a Field Office: The initiation of an enterprise investigation by an FBI 
Field Office requires the prior approval of the Field Office SSA with written notification 
to the appropriate FBIHQ substantive Unit and DOJ (as discussed in greater detail below). 


FBIHQ Divisions may require specific facts to be included in this notification. . b2 


- b7E 












nterprise investigations involving sensitive investigative matters require CDC review, 
SAC approval, and written notification to the appropriate FBIHQ substantive Unit and 
DOJ. . 


(U//FOUO) The responsible F BIHQ entity must notify the DOJ NSD or the Organized: 
Crime and Racketeering Section (OCRS) of the initiation of an enterprise investigation; 
by a Field Office or by FBIHQ, as soon as practicable but no later than 30 days‘after the 
initiation of the investigation. The FBI Field Office must also notify any relevant USAO, 
except in.counterintelligence investigations. See the DOJ NSD policy that governs 
notification to the USAO for counterintelligence investigations. 


2. (U//FOUO) By FBIHQ: The initiation of an enterprise investigation by an FBIHQ 
Division requires the prior approval of the appropriate Section Chief with written 
notification to the appropriate Field Offices and DOJ (as discussed in greater detail: 
below). Enterprise investigations involving sensitive investigative matters require OGC 
review, appropriate Assistant Director approval, and written notification to DOJ. 


(U//FOUO) The responsible FBIHQ entity must provide notification of an enterprise 
‘investigation initiation to the appropriate DOJ component (NSD or OCRS) as soon as 
practicable, but’no later than 30 days after the initiation of the investigation. FBIHQ must 
notify any relevant USAO of the initiation of all enterprise investigations, except in 
counterintelligence investigations. 
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a 


(U//FOUO) Note: For enterprise investigations that involve allegations that pertain to 
national security matters, the responsible DOJ component for the purpose of notification 
and reports is the NSD. For enterprise investigations relating to a pattern of racketeering 
activity that does not involve terrorism offenses, see 18 U.S.C. § 2332b(g)(5)(B), the 
responsible DOJ component is the Organized Crime and Racketeering Section of the 
Criminal Division. (AGG-Dom, Part II.C.3) 


(U) The Assistant Attorney General for National Security or the Chief of the Organized 
Crime and Racketeering Section, as appropriate, may at any time request the FBI to provide a 
report on the status of ån enterprise investigation and the FBI will provide such reports as 
requested. (AGG-Dom, Part II C.3.d) 


B. (U//FOUO) Closing: When closing the enterprise investigation, the Field Office or F BIHQ 
will provide the reason for closing the investigation. When closing an enterprise investigation 
the SSA or Unit Chief must ensure that all pending investigative methods have been 
completed/terminated (e.g., mail covers and pen register/trap and trace), Although there is no 
duration requirement for an enterprise investigation, the investigation must be closed upon all 
investigative activity being exhausted. ; 


1. (U/[FOUO) Closing an enterprise investigation initiated by a Field Office requires 
approval from the SSA with written notification to the appropriate FBIHQ substantive 
Unit. Unless advised contrary by the FBIHQ (UACB) substantive desk, the enterprise 
investigation can be.closed 30 days after the date of notification to FBIHQ. 


2. (U//FOUO) Closing an enterprise investigation initiated by FBIHQ requires approval 
from-the Unit Chief and notification to the appropriate Field Office. 


3. (U//FOUO) Closing an enterprise investigation initiated by a Field Office involving a. 
sensitive investigative matter requires approval from the SAC, with written notification 
to the appropriate: FBIHQ substantive Unit. The enterprise investigation can be closed 
30 days after the notification to FBIHQ, UACB. 


4, (U//FOUO) Closing an enterprise investigation initiated by FBIHQ involving.a 
sensitive investigative matter requires approval from the Section Chief, and written 
notification to the appropriate Field Office. 


C. (U//FOUO) File Review: 


(U//FOUO) Supervisory file reviews must be conducted at least once every 90 days in 


accordance with Section 3.4. File reviews for probationary agents must be conducted at least 
once every 60 days. 
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9. (U) Foreign Intelligence 


9.1. (U) Overview ` 


(U) Foreign intelligence is “information relating to the capabilities, intentions, or activities of 
foreign governments or elements thereof, foreign organizations, or foreign persons, or 
international térrorists.” A “Foreign Intelligence Requirement” is a collection requirement issued 
under the authority of thé DNI and accepted by the-FBI'DI. Additionally, the President, a USIC 
Office designated by the President, the Attorney General, Deputy Attorney General, or other 
designated DOJ.-official may levy a Foreign Intelligence Requirement on the FBI. Foreign 
intelligence collection by the FBI is based upon requirements. - 


(U//FOUO) Foreign Intelligence Requirements issued by one of the parties listed above and 
accepted by the FBI DI will fall into one of two categories: (i) those that address national 
security issues that are within the FBI’s core national security mission; and (ii) information 
relating to the capabilities, intentions, or activities of foreign governments or elements thereof, 


foreign organizations, foreign persons, or international terrorists which are not within the FBI’s 
core national security mission. 


‘(U/F QUO) Requirements which fall into the first category may correspond.to.EBI National 
‘Collection Requirements as defined in Section:5.11. FBI National Collection Requirements will 
only be addressed in properly authorized asséssments or incidental to predicated investigations. 
(See the DI PG for specific requirements.) . 


(U//FOUO) Requirements which fall into the second category are known as Positive Foreign 
Intelligence Requirements and may only be addressed under the authorities described in this 
section. Assessments dnd full investigations intended to result in the collection of positive 
foreign intelligence must be.based upon established requirements and approved by FBIHQ DI. 


Preliminary. investigations for the sole purpose of collecting positive foreign intelligence are not b2 
authorized. oE 














Assessments and full investigations initiated for the 
purpose of positive foreign intelligence collection must be opened by FBIHQ CMS. For 


assessments, the authorized purpose and identified objective must be documented in the 
assessment file. i 


(U//FOUO) “The general guidance of the FBI’s foreign intelligence collection activities by DNI- 
authorized requirements does not limit the FBI’s authority to conduct investigations supportable 
on the basis of its other authorities—to investigate federal crimes and threats to the national 
security—in areas in which the information sought also falls under the definition of foreign 
intelligence.” (AGG-Dom, Introduction A.3) Accordingly, the AGG-Dom authorizes the 

. collection of foreign intelligence incidental to predicated criminal, countérintelligence, 
counterterrorism, cyber, and weapons of mass destruction investigatioris. 


(U//FOUO) FBI National Collectiori Requirements which address national sécurity issues that 
are within the FBI's core national security mission will be worked under FBI substantive-case 
classifications (e.g., 200, 105, 31 5) as assessments. An assessment cannot be opened solely 
based upon an FBI National Collection Requirement. An authorized purpose (national security or 
criminal threat) must exist and the objective of the assessment must be clearly articulated when 
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opening an authorized assessment. The authorized purpose and identified objective for all 
assessments must'be documented in the assessment file. 


(U//FOUO) Example: 


(i) (U/FOUO) | 


b2 
b7E 
b7A 


b2 
b7E 


b2 
b7E 





(U//FOUO) Note: FBIHQ DI provides specific guidance in its policy implementation guide 
regarding FBI National Collection Requirements, FBI Field Office Collection Requirements, 
and Positive Foreign Intelligence Requirements, 


9.2. (U) Purpose and Scope 


(U//FOUO) As stated above, foreign intelligence is “information relating to the capabilities, 
intentions, or activities of foreign governments or elements thereof, foreign organizations, or 
foreign persons, or internatiorial terrorists.” The collection of positive foreign intelligence 
extends the sphere of the FBI’s information-gathering activities beyond federal crimes and 
threats to the national security and permits the FBI to seek information regarding a broader range. 
of matters relating to foreign powers, organizations, or persons that may be of interest to the 
conduct of the United States’ foreign affairs. (AGG-Dom, Introduction A.3) 


9.3. (U) Civil Liberties and Privacy 


(U) Because the authority to collect positive foreign intelligence enables the FBI to obtain F 
information pertinent to the United States’ conduct of its foreign affairs, even if that information 
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is not related to criminal activity or threats to the national security, the information so gathered 
‘may concern lawful activities. Accordingly, thé FBI must operate openly and consensually with 
a United States person tothe extent practicable when collecting positive foreign intelligence. 
(AGG-Dom, Introduction-A.3) i 


(U) The pursuit of legitimate investigative goals without infringing upon the exercise of 
constitutional freedoms is a challenge that the FBI meets through the-application of sound 
judgment and discretion. In order to further ensure.that civil liberties are not undermined, every 
assessment or full investigation involving the collection of positive foreign intelligence under 
this section must have an authorized purpose and an identified objective. Additionally, the. 
authorized purpose and objective of any assessment conducted must be documented and retained 
as prescribed in Sections 5 and 14. ` 


(U) No investigative activity, including the collection of positive foreign intelligence, may be 
taken solely on the basis of activities that are. protected by the First Amendment or on the race, 
ethnicity, national origin or religion of the subject. Collection of positive foreign intelligence 
requires: (i) an assessment relating to a matter of foreign intelligence interest responsive to a- 
Positive Foreign Intelligerice Requirement; or (ii) a full investigation that is predicated on a 
Positive Foreign Intelligence Requirement. 


(U) The.AGG-Dom present investigators with a number of authorized investigative methods‘in -- 
‘the conduct of an assessment or full investigation:to collect positive foreign intelligence.. 
Considering the effect on the privacy and civil liberties of individuals and the potential to 
damage the reputation of individuals, some of these investigative.methods are more intrusive 


9.4. (U) Legal Authority 


(U) The FBI’s legal authority. to collect positive foreign intelligence derives from a mixture-of 
administrative and Statutory sources. .(See.E.O. 12333; 50 U:S.C. §§ 401.et seq.; 50 U.S.C. . 

§§ 1801 et seq.; 28 U.S.C. § 532 note [incorporates the Intelligence Reform and Terrorism 
Protection Act, P.L. 108-458 §§ 2001-2003}). In collecting positive foreign intelligence, the FBI 
will be guided by Collection Requirements issued under the authority of the DNI, including the 
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National Intelligence Priorities Framework and the National HUMINT Collection Directives, or 
any successor directives issues under the authority of the DNI and accepted by F BIHQ DI. 


A. (U) Assessment Activities 


(U//FOUO) As discussed in Section 5 of the DIOG, the AGG-Dom authorize six types of 
assessments, one of which specifically applies to collection of positive foreign intelligence as 
follows: “séeking information, proactively or in response to investigative leads on:matters of 
foreign intelligence interest responsive to foreign intelligence requirements.” Positive Foreign 
Intelligence Requirements can be found on the DI’s Collection Management Section website. 
Further instructions on the collection of positive foreign intelligence are contained in the DI PG. 


B. (U) Full Investigation Activities 
(U//FOUO) As discussed in Section 7 of the DIOG, the AGG-Dom cites three. predication 


<A 


circumstances warranting a full investigation, one of which specifically applies to collection of 
positive foreign intelligence: “The full investigation may obtain foreign intelligence that is 
responsive to a foreign intelligence requirement.” 


(U//FOUO) Predicated positive foreign intelligence collection originates when the Office of the 
DNI levies-a: foteign-intelligence collection requirement-on the FBI arid'thé DI accepts the 
requirement as one to which-the FBI will endeavor to respond to as part of its Positive Foreign 
Intelligence Program. 


(U/FOUO) A full investigation to collect positive foreign intelligence is appropriate only when a 


DNI-authorized requirement exists for a particular issue and that requirement has been accepted 
by FBIHQ DI. 


9.5. (U//FOUO) Duration, Approval, Notice, Documentation, File Review and FBIHQ 
Standards for Approving.the Initiation of Positive Foreign Intelligence: 
Investigations 


A. (U//FOUO) Positive Foreign Intelligence Collection Authorities 


(U//FOUO) The FBIHQ CMS is -responsible for promulgating FBI policy and oversight of 

the Foreign Intelligence Collection Program (FICP). FBIHQ CMS will provide notice to the 

DOJ NSD upon the initiation of a positive foreign intelligence investigation. To ensure'that 

all positive foreign intelligence collection is focused on authorized Positive F oreign 

Intelligence Requirements, only FBIHQ CMS may approve the initiation of a positive 

foreign intelligence-assessment or full investigation] dor g otherwise b2 
eon DE e a oe eae mre 
eld offices must request, by EC, FBIHQ CMS approval 

© open such assessments and full investigations. - 














B. (U//FOUO)-Standards to be Considered When Initiating an Assessment or Full Foreign: 
Intelligence Investigation to Collect Positive Foreign Intelligence 


(U//FOUO) Before initiating or approving an-assessment or full investigation for thé purpose 
of collecting positive foreign intelligence, the approving official must determine whether: 


1. (U/FOUO) An authorized purpose and objective exists for the conduct of the assessment 
or an authorized purpose and adequate predication exists for initiating a full investigation; 
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2. (U//FOUO) The assessment or full investigation is not based solely on the exercise of 
First Amendment activities or on the race, ethnicity, national origin or religion of the 
subject; and 


3. (U/FOUO) The assessment or full investigation is an appropriate use of personnel and 
financial resources. 


9.6.  (U//FOUO) Standards for Initiating or Approving the Use of an Authorized 
Investigative Method 


(U/FOUO) Before initiating or approving the use of an investigative method in an assessment or 
full investigation for the purpose of collecting positive foreign.intelligence, an FBI employee or 
approving official must determine whether: 


A. (U//FOUO) The use of the particular investigative method is likely to further the purpose of 
the assessment or full investigation; 


B. (U//FOUO) The investigative method selected is the least intrusive method, reasonable under. 
the circumstances and, if taken relative-to a United States person, the method involves open 
` and consensual activities, to the extent praċticable; i 


C. (U//FOUO) If open and consensual activity would likely be successful, then covert non- 
, i consensual contact with a United States person may not be approved. 


D. (U//FOUO) In the case of an assessment, the anticipated value of the assessment justifies the 
use of the selected investigative method or methods; and 






E. (U//FOUO) The investigative method is an appropriate use of personnel and financial 
resources. 







9.7. (U) Authorized Investigative Methods in Foreign Intelligence Assessments and 
Predicated Investigations 






(U//FOUO) Prior to initiating or approving the use of a method, an FBI employee and approving j 
official will apply the standards as provided in Section:9.6. With the exceptions noted below, all 

lawful assessment methods may be used during positive foreign intelligeñce assessments. With 

the exceptions noted below, all lawful methods may be used during a full investigation to collect 

positive foreign intelligence. If actions are to be taken with respect to a United States person, 

the method used must include open and consensual activities, to the extent practicable. 








A. (U) Assessments (see DIOG Section 5.9 for a complete description of the following methods 
that may be used in assessments): ` 


1. (U) Obtain publicly available information. 


2. (U) Engage in observation or surveillance not re uiring a court order. 









3. (U) Access and examine FBI and other DOJ records. and obtain information from an 
Ores. and Obtain information irom any 
FBI or other DOJ personnel. 


(U) Access and examine records maintained by. and request information from, other 
federal, state. local. or tribal. or foreign governmental entities or agencies. 


5. (U) Use online services and resources (whether non-profit or commercial). 


6. (U) Interview or request information from members of the-public and private entities. 
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7. (U) Accept information voluntarily provided by governmental or private entities. 
8. (U) Use and recruit human sources in conformity with the AGG-CHS, 


(U//FOUO) Note: The use of Federal Grand Jury Subpoenas, to include subpoenas for 


telephone or electronic mail subscriber information, is not authorized in a positive foreign 
intelligence assessment. 


. (U) Full Investigations: 


(U) In addition to the authorized methods listed in Section 9.7.A, above, the following lawful 
methods may also be used in full investigations opened for the purpose of collecting positive 
foreign intelligence: ` 


1. (U) Physical searches of personal or real property where a warrant or'court order is not 
‘legally req p p y 


ly re uired because there is no reasonable expectation of rivacy (e.g., trash 
covers). (AGG-Dom, Part V.A.3) 


2. (U) Consensual monitoring of communications. including. consensual computer 
monitoring, subject to legal review by the CDC or the FBI OGC. Where a sensitive : 
monitoring circumstance is involved; the-monitoring must be approved.by the-DOJ. . 
Criminal Division or, if the investigation concerns a threat to the national security; by 
the DOJ NSD. (AGG-Dom, Part V.A.4) i i 


(U//FOUO) Note: See the classified appendix for additional information. 


(U//FOUO) Note: For those state, local-and tribal governments that do not sanction or 
provide a:law enforcement exception available to the FBI for one-party consent 
recording of communications with persons within their jurisdiction, the SAC must 
approve the consensual monitoring of communications as an OIA. Prior to the SAC 
authorizing the OIA, one-party consent must be acquired. The SAC may delegate the 
OIA approval authority to an ASAC or SSA. 


3. (U) Use of closed-circuit television, direction finders. arid other monitoring devices, 
subject to legal review by the CDC or the FBI OGC. (The methods described in this 
paragraph -usuaily do not require court orders or warrants unless they involve an 
intrusion into an area where there-is a reasonable expectation of privacy or non- 
consensual monitoring of communications, but legal review is necessary to ensure 
compliance with all applicable legal requirements.) (AGG-Dom, Part V.A.5) 


4. (U) Polygraph examinations (AGG-Dom, Part V.A.6) 


5. (U) Undercover operations. Undercover operations involving religious or political 
organizations conducted for the purpose of collecting positive foreign intelligence must 
be reviewed and approved by FBIHQ, with participation by the DOJ NSD in the review 
process. (AGG-Dom, Part V.A.7): : 


6. (U//FOUO) Use of pen registers and trap and trace devices in conformity with F ISA 
(50 U.S.C. §§ 1841-1 846), for non-United States persons only. (AGG-Dom, Part 
V.A.10) 


7. (U) Electronic surveillance in conformity with FISA or E.O. 12333 § 2.5. (AGG-Dom, 
Part V.A.11) + ' : 
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8. (U//FOUO) Physical searches including mail openings. in conformity with FISA or 
E.O. 12333 § 2.5, The classified appendix to the DIOG provides additional information 
regarding certain searches. (AGG-Dom, Part V.A.12) 


9. (U) Acquisition of positive foreign intelligence inform 
’ MUL of FISA. (AGG-Dom, Part V.A.13) 


10. (U/FOUO) Obtaining a business records order pursuant to FISA, 50 U.S.C, §§ 1861-83, 


for records relating to a non-United States person only. 


9:8. (U//FOUO) Investigative Methods Not Authorized During Foreign Intelligence 
Investigations i 








ation in conformity with Title 


(U//FOUO) The following investigative methods are not. permitted for the purpose of collecting 
positive foreign intelligence: 


A. (U/FOUO) National Security Letters (15 U.S.C. §§ 1681u, 1681v: 18 U.S.C. § 2709; 12 
U.S.C. § 341 [a][S][A]; 50 U.S.C. § 436); 


B. (U//FOUO) Obtaining a businéss records order pursuant to FISA, 50 U.S.C. §§ 1861-1863, 


for records relating to a United. States person: 


‘C. (U/FOUO) Use of pen registers and trap-and trace devices in conformity with FISA (50 


U.S.C. §§ 1841-1846) on a United States person; 


D. (U//FOUO) Use of pen registers ‘and trap and trace devices:in conformity with chapter 206 of 


18 U.S.C. §§ 3121-3127; 
E. (U/IFOUO) Mail covers; 


F. (U//FOUO) Compulsory process as authorized by law,.including grand jury subpoenas and 
other subpoenas (e.g., Administrative Subpoena); and: ; 


ae. (U//FOUO) Accessing stored wire and electronic communications-and transactional records 
in conformity with chapter 121 of title 18,. United States Code (18 U.S.C..§§ 2701-2712). 

. (AGG-Dom, Part V.A.9) 

9.9. (U) Sensitive Investigative Matter 





(U//FOUO) The title/case caption of the opening or subsequent EC for a positive foreign 
intelligence assessment involving a sensitive investigative matter must contain the words 
“Assessment” and “Sensitive Investigative Matter.” The title/case caption of the opening or 
subsequent EC for a full investigation for the collection of positive foreign intelligence involving 
a Sensitive investigative matter must contain the words “Sensitive Investigative Matter.” DIOG ` 
Section 10 contains the required approval authorities and factors to be considered relative to an 
assessment or a predicated investigation involving a sensitive investigative matter. The AGG- 
Dom defines sensitive investigative matter as follows: 


A. (U//FOUO) Sensitive Investigative Matter: An investigative matter involving the activities 
of a domestic public official or political candidate (involving corruption or a threat to the 
national security), religious or political organization or individual prominent in such an 
organization, or news media, or any other matter which, in the judgment of the official 
authorizing an investigation, should be brought to the attention of F BI Headquarters and 
other DOJ officials. (AGG-Dom, Part VILN.) As a matter of FBI policy, “judgment” means 
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that the decision of the authorizing official is discretionary. DIOG Section 10 and/or the 
DIOG classified Appendix G défirie domestic public official, political candidate, religious or 
political organization or individual prominent in such an organization, and news media. 


All positive foreign intelligence assessments or full investigations involving a sensitive 


, and approved by 


investigative matter must be reviewed by the CDC, approved by the SAC 
the appropriate FBIHQ DI Section Chief. (see DIOG Section 9.10 below) 











(U//FOUO) The sensitivity related to an academic i 
tradition of “academic freedom” (e.g., an atmosphere in which students and fa 
to express unorthodox ideas and views and to challen 


repercussion). Academic freedom does not mean, 
limits to FBI investi 





nstitution arises from the American 






culty are free 

ge conventional thought without fear of 
however, that academic institutions are-off 
gators in pursuit of information or individuals of legitimate investigative 








__ interest. 
(U/FOUO) 
_____ [seethe DIOG classified Appendix G. 
9.10. (U) Approval and Notification 
A. (U) Initiation 


(U//FOUO) The authorized purpose of an assessment or full investigation must be 
documented in the initiating EC, 










1. (U//FOUO) Approval to Initiate an Assessment to Collect Positive Foreign 
Intelligence: No assessment for the purpose of seeking information relating to matters 
of positive foreign intelligence interest responsive to a Positive Foreign Intelligence 
Requirement may be initiated without prior ap proval from Afte 
obtaining FBIHQ CMS appro 










d 
















b2 
-/CaSe Caption of the opening EC must contain the b7E 
nopsis must identify the authorized purpose and the 





ord “Assessment,” and the sy 
objective of the assessment. 










(U//FOUO) Approval to Initiate a Full Investigation: FBIHQ CMS will direct the 
initiation of full ‘investigations based on Positive F oreign Intelligence Requirements. 


3. (U//FOUO) Approval to Initiate an Assessment or Full Investigation Involving a ` 
Sensitive Investigative Matter: The initiation of either an assessment or full 
investigation to collect positive foreign intelligence involving a sensitive investigative 


matter must have prior CDC review, SAC approval and the appropriate FBIHQ DI 
Section Chief approval. 
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B. (U) Notice ` 


1. (U//FOUO) Notification to DOJ is not-required when an assessment to collect 
information relating to a matter of foreign intelligence interest responsive to a positive 
foreign intelligence requirement is initiated. 


2. (U//FOUO) Notification to DOJ is required when a full investigation to collect 
information responsive to a foreign intelligence requirement is initiated. Notice must be 
forwarded from:'FBIHQ CMS to the DOJ NSD as soon as.practicable but no later than 
30 calendar days after the initiation of the investigation. (AGG-Dom, Part II.B.5) 


C. (U) Duration 


(U//FOUO) A foreign intelligence assessment and full investigation may continue for as long 
as necessary to achieve its purpose and objective if an assessment, or until the requirement is 
- met ina full investigation. 


D. (U) File Review 


1. (U//FOUO).Assessments: Foreign, intelligence assessments require recurring 90 day file 
reviews of the assessment file and any sub-file by the SSA/SIA. File.reviews for 
probationary agents must be conducted at least every 60-days. The file review must: 


a. (U//FOUO) Evaluate the progress made toward the achievement of the authorized 
purpose and objective; 


b. (U//FOUO) Determine whether it is reasonably likely that information may be 


obtained that is relevant to the authorized objective, thereby warranting a continuation 
of the assessment; 


c. (U//FOUO) Determine whether the Field Office has appropriate access and ability to 
collect positive foreign intelligence in response to a requirement that has been 
accepted-by FBIHQ DI; and 

d. (U//FOUO) Determine whether the assessment should be terminated. 


(U/FOUO) Full Investigations: Supervisory file reviews must be conducted at least 
every 90 days in accordance with Section 3.4. File reviews for probationary agents must 
bé conducted.at least.every 60-days. ` 


E. (U) Closing 


(U//FOUO) Upon its determination or at the request of the Field Office, only FBIHQ’‘CMS 
may Close an assessment or full itivestigation. 


F. (U) Annual Letterhead Memorandum 


1. (U//FOUO) Field Office Responsibility: All FIGs must submit an annual ‘report on 
each positive foreign intelligence full investigation that was open for any period of time 
during the past calendar year. This. report ‘is due to FBIHQ CMS no later than January 


30th of the calendar year following each year during which a full investigation is open 
and must consist of the following: 


a. (U//FOUO) The Positive Foreign Intelligence Requirement to which the 
investigation was responding; 
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b. (U//FOUO) All methods of collection used; 
c. (U//FOUO) All sensitive matters encountered; 


i: (U//F QUO) A list of all IRs by number issued based on information collected 
during the investigation; ; 


» (U/FOUO) A summary of the positive foreign intelligence collected; and 


(U//FOUO) The date the full. investigation was opened and, if applicable, the date 
closéd. 


(U//FOUO) These reports should be submitted by electronic communication. The EC 
` must be uploaded into ACS in a file number and in the applicable Foreign Intelligence 
Collection Program (F ICP) case files as designated in the DI PG. 


2. (U//FOUO) FBIHQ Responsibility: FBIHQ CMS must compile data from each Field 
Office regarding the scope and nature of the prior year’s positive foreign intelligence 
collection program. The FBIHQ CMS must submit an annual comprehensive report of. 
all‘activity described above to. DOJ NSD no later than April 1* ofeach year. The report 
must include the following information: 


a. (U//FQUO) The Positive Foreign Intelligence Requirément to-which-the. 
invéstigation. was responding; 


b. (U//FOUO) All sensitive matters; and 
c. (U//FOUO) The date the full investigation was opened and closed (if applicable). 


9:11, (U) Retention of Information 


(U//FOUO) FBIHQ CMS must maintain a database or records systems that permits the prompt 
retrieval of the status of each positive foreign intelligence colléction full investigation (Open or 
closed), the dates of opening and closing, arid the basis for the full investigation. 
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10. (U) Sensitive Investigative Matter / Academic Nexus 


10.1. (U) Overview 


(U) Certain investigative matters should be brought'to the attention of FBI management and DOJ 
officials because of the possibility of public notoriety and sensitivity. Accordingly, assessments 

_ and predicated investigations involving “sensitive NSS EPRVE matters” have special: approval 
and reporting requirements. 


10.2. (Uy Purpose, Scope and Definitions 


(U//FOUO) A sensitive investigative matter is defined as an investigative matter involving the 
activities of a domestic public official or political candidate (involving corruption or a threat to 
the national security), religious or political organization or individual prominent in such an 
organization, or news media, or any other matter which, in the judgment of the official 
authorizing an investigation, should be brought to the attention of FBI Headquarters and other 
DOJ officials, (AGG-Dom, Part VII.N.) As a matter of FBI policy, “judgment” means that the 
decision of the authorizing official is discretionary. Descriptions for each of the officials and 

` entities contained in the sensitive investigative matter definition are as follows:, 


A. (U//FOUO) Doméstic Public Official—A-domestic-public official is an individual elected or 
appointed to a position of trust in a federal, state, local or tribal governmental entity or 
political subdivision thereof. A matter involving a domestic public official is a “sensitive 
investigative matter” if the assessment or predicated investigation involves corruption or a 
threat to the national security. 


B. (U//FOUO) Political candidate—A political candidate is an individual who is seeking 
election to,.or nomination for election to, or who has authorized others to explore on’his or 
‘her behalf the possibility of election to, an office in a federal, state, local or tribal: 
governmental entity or political subdivision thereof. As with domestic. public officials, a 
matter involving a political candidate is a sensitive investigative matter if the assessment or 
predicated investigation involves corruption or a threat to the national security. 


C._(U//FOUO) Political organization or individual prominent in such an organization— 








D. (U//FOUO) Religious organization or individual prominent in such an organization || 
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E. (U//FOUO) Member of the media or a news organization 







F, (U//FOUO Academic Nexus—/ | 


(U//FOUO) The sensitivity related to an academic institution arises from the American 
tradition of “academic freedom” (e.g., an atmosphere in which students and faculty are free 
to express unorthodox ideas and views and to challenge conventional thought without fear of 
repercussion). Academic freédom does not mean, however, that academic institutions arè off 


limits to FBI investigators in pursuit of information or individuals of legitimate invéstigative 
interest. 7 


U//FOUQ i =i ` 
see the classified appendix. i 


G. (U//FOUO) Other Matters—Any matter that in the.judgment of the official authorizing an 
investigation that should be brought to the attention of FBIHQ and other Department of. 
Justice officials. As a matter of FBI policy, “judgment” means that the decision of the 
authorizing official is discretionary. 





10.3. (U//FOUO) Factors to Consider When Initiating or Approving an Investigative 
Activity Involving a Sensitive Investigative Matter 


(U//FOUO) In addition to the standards for approving investigative activity in Sections 5, 6, 7 
and 9, the following factors should be considered by the: (i) FBI employee who seeks to initiate 
an assessment or predicated investigation involving a sensitive investigative matter; (ii) CDC or 
OGC when reviewing such matters; and (iii) approving official in determining whether the 
assessment or predicated investigation involving a sensitive investigative matter should be 
authorized: . 


A. (U//FOUO) Seriousness/severity of the. violation/threat; 

B. (U//FOUO) Significance of the information sought to the violation/threat; 

C. (U//FOUO) Probability that the proposed course of action will be successful; 
D 


- (U//FOUO) Risk: of public exposure, and if there is such a risk, the adverse impact or the 
perception of the adverse impact on civil liberties and public confidence; and 


E. (U//FQUO) Risk to the national security or the public welfare ifthe proposed course of 
action is not approved (i.e., risk.of doing nothing). 


(U/EQUO) In the context of a sensitive investigative matter, particular care should be taken 
when, considering whether the planned course of action is the least intrusive method feasible. 
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10.4. (U) Duration, Approval, Notice and Documentation 


(U//FOUO) The following are required approval and notification levels for investigative 
activities involving sensitive investigative matters: 


A. (U//FQUO) Initiated by a Field Office: 


* (U//FOUO) Assessment: An FBI employee may initiate assessment type one and two 
activities, as described in Section 5.6.A.1 and 2 (prompt checking of leads), without prior 
supervisory approval: However, because assessments involving sensitive investigative 
matters must be brought to the attention of FB]. Field Office management, CDC review and 
SAC approval to continue the assessment must be acquired as soon as practicable. For 
assessnient types 3, 4 and 6 assessments (see DIOG Section 5.6.A.3. 4 and 6) involving a 
sensitive investigative matter, prior CDC review and SAC approval is required. For 

` assessment types 3, 4, and 6, as described in Section 5.6.A.3. 4 and 6, if a sensitive 
investigative matter arises after the initiation of an assessment, investigative activity must 
cease until CDC review and SAC approval is acquired. 


(U//FOUO) Assessments involving a sensitive investigative matter do not require notification 
to DOJ or the United States Attorney. (AGG-Dom, Part [1.B.5.a) All positive foreign 

_ intelligence collection assessments, regardless of whether they involve-a sensitive 
investigative matter, require prior FBJHQ CMS approval. If a sensitive investigative matter 


arises after the initiation of a positive forcign intelligence collection assessment, notice must 
be provided to FBIHQ CMS. . 


(U//FOUO) Predicated Investigation: For all predicated investigations involving a sensitive 
investigative matter, prior CDC review and SAC approval is required, and the Field Office 
must provide written notification to the appropriate FBIHQ Unit Chief and.Section Chief. 
Additionally, the Field Office must provide written notification to-the United’States Attorney . 
or the appropriate FBIHQ Section must provide written notification to the DOF Criminal 
Division or eS as soon as pene but no later than 30 calenda 




















(U//FOUO) If.a sensitive investigative matter arises after the initiation-of a predicated 
investigation, investigative. activity must cease until CDC review and SAC approval is 
acquired and notice is furnished to the FBIHQ Unit and Section as specified above. 


B. (U//FOUO) Initiated by FBIHQ: 


(U//FOUO) Assessment: For assessment types 3, 4 and.6, as described in Section 5.6.4.3. 4 
and 6, involving a sensitive investigative matter, OGC review and Section Chief approval is 
required. Ifa sensitive investigative matter arises aftér the initiation of an assessment, 
investigative activity must cease until OGC review and Section Chief approval is acquired. 


(U//FOUO) Assessments involving a sensitive investigative matter do not require notification 
to DOJ or the United States Attorney. (AGG-Dom, Part II.B.5.a) All positive foreign 
intelligence collection assessments, regardless of whether they involve a sensitive 
investigative matter, require prior FBIHQ CMS approval. If a sensitive investigative matter 


“arises after the initiation of a positive foreign intelligence collection assessment, notice must 
be provided: to FBIHQ:CMS. 
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(U/FOUO) Predicated Investigation:-For predicated investigations involving a sensitive 
investigative matter, OGC review, Section Chief approval, and written notification to the 

United States Attorney, DOJ Criminal Division or DOJ NSD is required, as- soon as 

practicable, but no later than 30 calendar days after the initiation of such an investigation. b2 


7 
ist identify boe 
(see classified appendix . 


(U//FOUO) Ifa sensitive investigative matter arises after the initiation of a predicated 
investigation, investigative activity must cease until OGC review and Section Chief approval 
is acquired and notice is furnished as specified above. 


10.5. (U//FOUO) Distinction Between Sensitive Investigative Matter and Sensitive 
Circumstance 


(U//FOUO) The term “sensitive investigative matter” should not be confused with the term 
“sensitive circumstance” as that term is used in undercover operations. A “sensitive 
circumstance” relates to an undercover operation requiring FBIHQ approval. A comprehensive 
list of sensitive circumstances for criminal activities is contained in the Attorney General’s 
Guidelines on FBI Pndetooyer Opertions' anei in Section 11 of the DIOG for national security 
matters, The Crimina iew Committee (CUORC) Cs 
muSt review and approve undercover — 


b7E 










Avolve sensitive circumstances. The detailed policy for undercover operations is 
described i in DIOG. Section 11.8, the Field Guide for Undercover and Sensitive Operations 
(FGUSO), and the FBIHQ substantive Division program implementation guides. 


10.6. (U/FOUO) Sensitive Operations. Review Committee 
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11. (U) Investigative Methods Bes 


11.1. (U) Overview 


(U//FOUO) The conduct of assessments, predicated investigations and other activities authorized 
by the AGG-Dom.may present choices between the use of different investigative methods 
(formerly investigative “techniques”) that are each operationally sound and effective, but that aré 
more or less intrusive, considering such factors as the efféct on the privacy and civil-liberties of 
individuals and the potential damage to reputation. The least intrusive method feasible is to be 
used in such situations. However, the choice of methods is a matter of judgment. The FBI is 
authorized to use any lawful method consistent with the AGG-Don, even if'intrusive, where:the 
degree of intrusiveness is warranted in light of the seriousness of a criminal or-national security: 
threat or the strength of the information indicating its existence, or in light of the importance of 
foreign intelligence sought to the United States’ interests. (AGG-Dom, Part 1.C.2.) 


(U) The availability of a particular investigative method in a particular case may depend upon 
the level of investigative activity (assessmenit, preliminary investigation, full investigation, 
assistance to other agencies). l 


11.1.1. -(U) Least Intrusive Method 


(U) The AGG-Dom requires that the "least intrusive" means or method be considered and—if 
operationally sound’and effective—used to obtain intelligence or evidence in lieu of more 
intrusive methods. This principle is also reflected in Executive Order 12333, which governs the 
activities of the United States intelligence.community.. The concept of least intrusive method 
applies to the collection of intelligence and evidence. i 





(U) Selection of the.least intrusive means is a balancing test as to which FBI employees must-use 


common sense and sound judgment to effectively execute thèir duties while mitigating the 


` potential negative impact on the privacy and civil liberties of all people encompassed within the 


assessment or predicated investigation, including targets, witnesses, and victims. This principle 
isnot intended to discourage investigators from seeking relevant and necessary intelligence, 


_information, or evidence, but rather is intended to encourage investigators to choose the least 


intrusive—yet still effective—means from the available.options to obtain the material. 
Additionally, FBI employees should operate openly and consensually with United States persons 


to the extent practicable when collecting foreign intelligence.that doés not concern criminal 
activities or threats to the national.security. 


(U) Section 4.4 describes the least intrusive methods concept and the standards to be applied by 


. FBI employees. 


12 
UNCLASSIFIED-FOR OFFICIAL USE ONLY. 


r 


UNCLASSIFIED - FOR OFFICIAL USE ONLY 
- Domestic Investigations and Operations Guide 


11.2. (U) Authorized Investigative Methods in Assessments and Predicated Investigations 


(U) The below listed investigative methods may be used in assessments and predicated 
investigations. The use and/or dissemination of information obtained by the use of all authorized 
investigative methods must comply with the AGG-Dom and DIOG Section 1'4. 


11.2.1. (U) Authorized Investigative Methods in Assessments 
(AGG-Dom, Part IT.A.4.) 


(U//FOUO) An FBI employee must document on the FD-71, or in Guardian, the use of or the 
request and approval for the use of authorized investigative methods in type 1 and 2 assessments 
(see DIOG Section 5.6.A.1 and 2). By exception, certain assessment type | and:2 situations may 
require the use of an EC to document the use and approval of certain investigative methods. All 
authorized investigative methods 'in type 3, 4, and 6 assessments.(see DIOG Section 5.6:A.3, 4 
and 6) must use an EC to document the use of or the request and approval for the use of the 
applicable-investigative method. For a detailed description of these methods see DIOG Section 
5.9. 





A. (U) Obtain publicly available information. 


B. (U) Access and examine FBI and other Department of Justice records. and obtain information 
from any FBI or other Department of Justice personnel. 


C. (U) Access and examine records maintained by. and request ‘information from. other federal. 
 — state. local, or tribal. or foreign governmental entities or agencies. 


D. (U) Usé online services ‘and resources (whether non-profit or commercial). 


mi 


» (U) Use and recruit human sources in conformity: with the Attorney General's Guidelines 
Regarding the Use of FBI Corifidential Human Sources. 


(U) Interview or request information from members of the public and private entities. 
. (U) Accept information voluntarily provided by governmental or private entities. 


. (U) Engage in observation and conduct physical surveillance not requiring a court order. 


TIQ 


(U//FOUO) Grand jury subpoenas for telephone. or electronic mail subscriber information 
during type | and 2 assessments. . 


(U//FOUO) Note: In assessments, supervisory approval is required prior to use of the TEN 
investigative methods: cértain interviews, tasking of a CHS; and- physical surveillance not 
requiring a-court order. During predicated investigations the supervisory approval requirements 
for these investigative methods may not apply. 


11.2.2. (Ü) Authorized Investigative Methods in- Preliminary Investigations 7 
(AGG-Dom, Part V.A.1-10) 

(U) In preliminary investigations the authorized methods include the following: [AGG-Dom, 

Part IEB. and Part V.A.] 

A. (U) The investigative methods-approved for assessments. 

B. (U) Mail covers. 
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(U) Physical searches of personal_or real property where a warrant-or court order is not 
legally réquired becausc there is no reasonable expectation of privacy (e.g.. trash covers). 


(U) Consensual monitoring of communications, including consensual computer monitoring. 
subject to legal review by the CDC or the OGC. When a sensitive monitoring circumstance is 
involved, the monitoring must be approved by the DOJ Criminal Division or, if the 
investigation concems a threat to the national security or foreign-intelligence, by the: DOJ 
National Security Division. f 


(U//FOUO) Note: For additional information, see the classified appendix. 


- (U//FOUO) Note: For those state, local and tribal governments that do not sanction or 


provide a law enforcement, exception available to the FBI for one-party consent recording of 
communications with persons within their jurisdiction, the SAC must approve the consensual 
monitoring of communications as an OIA. Prior to the SAC authorizing the OIA, one-party 
consent must be acquired. The SAC may delegate the.OIA approval authority to an ASAC or 
SSA, 


> (U) Use of closed-circuit television, direction finders. and other monitoring devices. subject 


to legal review by the CDC or the OGC. (The methods described in this paragraph usually do 


not-require court orders.or wartants-unless they involve an intrusion into an area where there 


is a reasonable expéctation of privacy or non-consensual monitoring of communications, but 
legal review is necessary to ensure compliance with all applicable legal requirements.) 


(U) Polygraph examinations. 


. (U) Undercover operations. In investigations relating to activities in violation of féderal 


criminal law that do not concern threats to the national security or foreign intelligence, 
undercover operations must be carried out in conformity with the Attorney General’s 
Guidelines on Federal Bureau of Investigation Undercover Operations. In investigations that 
concern threats to the national security or foreign intelligence, undercover operations 
involving religious or political organizations must be reviewed and approved by FBI 
Headquarters, with participation by the DOJ National Security Division in the review process. 


(U) Compulsory process as authorized by law. including grand jury subpoenas-and other 
subpoenas, National Security Letters (15 U.S.C. §§ 1681u, 1681v;, 18 U.S.C. § 2709; 12 
US.C.-§ 3414[a][S][A]; 50 U.S.C. § 436, and FISA orders [50 U.S.C. §§ 1861-63]). 


(U) Accessing stored wire and electronic communications and transactional records in 
conformity with chapter.121 of title 18. United States Code (18 U.S.C. §§ 2701-2712). 


(U) Use of pen registers and trap and trace devices in conformity with chapter 206 of title 18. 
United Statés Code (18 U.S.C. §§ 3121-3127) or FISA (50 U.S.C. §§ 1841-1846). 


11.2.3. | (U) Authorized Investigative Methods in Full Investigations 


(AGG-Dom, Part V.A.11-13) 


(U) In full investigations, to include enterprise investigations, all investigative methods approved 
for assessments and preliminary investigations may be used. In addition, the three investigative 
methods listed below may only be used in full investigations: 


3 
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A. (U) Electronic surveillance in conformity with chapter 119 of title 18. United States Code (18 
U.S.C. §§ 2510-2522), or the Foreign Intelligence Surveillance Act. or Executive Order 


12333 § 2.5. 


B. (U//FOUO) Physical searches, including mail openings. in conformity with Rule 41 of the 
Federal Rules of Criminal Procedure, the Foreign Intelligence Surveillance Act. or Executive 
Order 12333 § 2.5. Note: For additional information regarding.certain searches, see the 
classified appendix. 

C. (U) Acquisition of foreign intelligence A in conformity with Title VII ofthe FISA. 


(U//FOUO) Note: Not all investigative methods are.authorized while collecting foreign 
intelligence as part of a full investigation. See DIOG Section 9 for more information: 


11.2.4. (U) Particular Investigative Methods 








(U//FOUO) All lawful investigative methods may be used i in activities under thé AGG-Dom as 
authorized by the AGG-Dom. Authorized methods include, but are not limited to, those 
identified in the rest of this.section. In some-instances they are subject to special restrictions or 
review or approval requirements. (AGG-Dom, Pait V.A.) 
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11.3. (U) Investigative Method: Mail Covers 
11.3.1. (0) Summary 


(U) A mail cover may. be sought only in a predicated investigation when there exists reasonable 
grounds to demonstrate that the mail cover is necessary to: (i) protect the national security; (ii) . 
locate a fugitive; (iii) obtain evidence of the commission or attempted commission of a féderal 
crime; or (iv) assist in the identification of property, proceeds or assets forfeitable because ofa 
violation of criminal law. 39 C.F.R. § 233.3(e)(2). 





b2 
b7E 
b2 
b7E 
general rule, a mail cover in the APO/FPO system overseas may only be ordered by a military 
authority competent to order searches arid séizures for law enforcement purposes, usually a 
commanding officer. See DoD 4525.6-M, the DoD Postal Manual: 
b2 
b7E 





11.3.2. (U) Legal Authority 


A. (U) Postal Service Regulation 39 C.F.R. § 233.3 is the sole authority and procedure for 
initiating a mail cover and for processing, using and disclosing information obtained from a 
mail cover; 


B. (U) There is no Fourth Amendment protection for information on the outside of a piece of 
mail. See, e.g., U.S. v. Choate, 576 F.2d 165,.174 (9" Cir., 1978); and U.S. v. Huie, 593 F.2d 
14 (5" Cir., 1979); and, 


C. (U) AGG-Dom, Part V.A.2. 
11.3.3. (U) Definition of Investigative Method 


(U) À mail cover is the non-consensual recording of any data appearing on the outside cover of 
any sealed or unsealed mail! matter to obtain information in order to: 


A. (U) Protect the national security; 





. (U) Locate a fugitive; 
. (U) Obtain evidence of commission or ‘attempted commission of a federal crime; 


- (U) Obtain evidence of a violation or attempted violation of a postal statute; or _ 


moa Dw 


(U) Assist in the identification of property, proceeds or assets forfeitable under law. 
39 C.F.R. § 233.3(c) (1). 
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(U) In this context, a “recording” means the transcription, photograph, photocopy, or other 
facsimile of the image of the outside cover, envelope, or wrappers of mailed-matter. A warrant or 
court order is almost always required to obtain the contents of any class of mail, sealed or 
unsealed. . y 3 


11.3.4. (U) Standard for Use and Approval Requirements.for Investigative Method 


(U) The standard to obtain a mail cover is.¢stablished by the Postal Service regulation.. The Chief 
Postal Inspector may order a mail cover “[w]hen a written request is received from any law 
‘enforcement agency in which the requesting authority specifies the reasonable grounds to 
demonstrate the mail cover is necessary to: 


e (U) Protect the national security; 
e (U) Locate a fugitive; 
e (U) Obtain information regarding the commission or attempted commission of a crime; or 


e (U) Assist in the identification of property, proceeds or assets forfeitable because of a 
violation of criminal law.” 29 C.F.R. § 233.3(e)(2).. 


(U/FOUO) National-Security. Mail.Cover: A national.security mail cover request must be 
approved by the Director or designee, currently only the EAD of the National Security Branch. 
All requests for national security mail covers must be reviewed by the Field Office SSA 
according to the below-criteria. A national security mail cover sought “to protect the national 
security” includes protecting-the United States from actual or threatened attack or other grave, 
hostile act; sabotage; international terrorism; or clandestine intelligence activities, including 
commercial [economic] espionage by foreign powers or their agents. 


(U//FOUO) After being approved by the SSA, the Field Office must transmit the mail cover . 
letter request by EC, with the draft letter as an attachment, to the National Security Law Branch 
(NSLB) for legal review and concurrence. Upon review and concurrence, the NSLB must 


transmit the letter request for signature approval to the EAD, National Security Branch; or, in his 
or her absence, ‘to the Director. 


(U//FOUO) Criminal Mail Cover: A criminal mail cover request may be approved by the Field 
Office SSA. The SSA may approve a request for a mail cover if there are reasonable grounds.to 
demonstrate that the mail cover is necessary to assist in efforts to: (i) locate a fugitive; (ii) obtain 
information regarding the commission or attempted commission of a federal crime; or (iii) to 


assist in the identification of property, proceeds or assets forfeitable because of a violation of 
criminal law. 


(U//FOUO) SSA review and or approval of a national security or criminal mail cover 


request: Approval of any mail cover request or an extension is conditioned on the following 
criteria being met: 


A. (U/FOUO 
b2 
b7E 
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b2 
b7E 


b2 
b7E 


D. (U//FOUO 
: b2 
b7E 


Be AO OU ne ee ee ee By 
b7E, 


F. (U//FOUO b2 
Note: b7E 


Under postal regulations, a mail cover must not include matter mailed. between the mail 


cover subject and the subject’s attorney, unless the attorney is also a subject under the 
investigation.)' 





; b2 
G. (U//FOUO b7E 


H. (U//FOUO) 
I. (U/FOUO) 






b2 
b7E 


(U) Emergency Requests: When time is of the essence, the Chief Postal Inspector, or 
_ designee, may act upon an oral request to be confirmed by the requesting authority, in 
writing, within three calendar days. Information may be released prior to receipt of the 
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written request only when the releasing official is satisfied that an emergency, situation exists. 


39 CER. § 233.3(e)(3). 


(UAn “emergency situation” exists when the immediate release of information is required 
to prevent the loss of evidence or when there is a potential for immediate physioal harm to 
persons or property. 39 C. FLR. § 233.3(c)(10). 


11.3.5. (UJ Duration of Approval 


A. (U) National Security: A national security mail cover is s limited to 120 days from the date 
the mail'cover is initiated. Extensions can only be authorized by the Chief Postal Inspector or 
his designee at the National. Headquarters of the Office of the Chief Postal Inspector. 39 
C.F.R. § 233.3(g)(6). 


B. (U) Criminal mail covers except fugitives: A mail cover in a criminal case is limited to no 
more than 30 days, unless adequate justification is provided by the requesting authority. 39 
C.F.R. § 233.3(g)(5). Renewals may be granted for additional 30-day periods under the same 
conditions and procedures applicable to the original request. The requesting authority must 
provide a statement of the investigative benefit of the mail cover and anticipated benefits to 
be derived.from the extension. 


C. (U) Fugitives: No mail cover instituted to locate a fugitive mây remain in force for‘longer 
than 120 continuous days unless personally approved for further extension by the Chief 
Postal Inspector or his/her designees at National’ Headquarters. 39 C.F.R. § 233.3(g)(6). 


D. (U) Exception for Indictments: Except for fugitive cases, no mail cover may remain in 
force when an information has been filed or the subject has been indicted for the matter for 
which the mail cover has been requested. If the subject is under investigation for further 
criminal violations, or a-mail cover is required to assist in the identification of property, 
proceeds or assets forfeitable because of a violation of criminal law, a new mail cover order 

`- must'be requested. 39 C.F.R. § 233.3(g)(7). 


11.3.6. (U) Specific Procedures 


(U//FOUO) The Postal Regulation requires that physical storage of all reports issued pursuant to 
a mail cover request to be at the discretion of the Chief Postal Inspector. 39 C.F.R. § 233.3(h)(1). 
Accordingly, FBI employees:must conduct a timely review of mail cover documents received 
‘from the USPS. A copy of the signed mail cover request and the Sigga transmittal letter must be 
maintained i in the investigative case file. 


b2 
‘DIE 





11.3.7. (U) Compliance and Monitoring 


(U//FOUO) FBI employees must conduct a timely review of mail cover information received 
- fromthe USPS for any potential production of data beyond the scope of the requested mail cover 


(“overproduction”) and either destroy or return the overproduction to the assigned USPS 
representative noting the reason for the return. 
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11.4. (U) Investigative Method: Physical searches of personal or real property where a 
_ Warrant or court order is not legally required because there is no reasonable b2 
expectation of privacy Glee 


11.4.1. (CQ) Summary 


(U//F Quo) Application: In predicated investigations, the FBI may-conduct physical searches 
of personal or real property where a warrant or court order is not legally required because there i arrant or court order is not legally required because thers i 
no reasonable expectation of privac 






































not otherwise prohibited by AGG-Dom, Part 
UOT: (ee Cg TE 


11.4.2. (U) Legal Authority 

A. (U) AGG-Dom, Part V.A.3, 

B. (U) Fourth Amendment to the United States Constitution 
11.4.3. (U) Definition of Investigative Method 


(U) The'Fourth Amendment to the United States Constitution prevents the FBI from conducting 
unreasonable searches and seizures. It also generally requires a warrant be obtained if the search 
will intrude on a reasonable expectation of privacy. To qualify as a “reasonable expectation of 

. privacy,” the individual must have an actual subjective expectation of privacy and-society must 
be prepared to recognize that expectation as objectivély reasonable. See Katz v. United States, 
389 U.S. at 361. If-an individual has a reasonable expectation of privacy, a warrant or order 
issued by a court of competent jurisdiction or an exception to the requirement for such a warrant 
or order is required before a search may be conducted. Physical:searches of personal or real 
property may be conducted without a search warrant or court order if there is no reasonable 
expectation of privacy in the property or area. As a general matter, there is no reasonable 
expectation of privacy in areas that are exposed to public view or that are otherwise available to 
the public. A reasonable expectation of privacy may be terminated by an individual abandoning 
property, setting trash at the edge of the curtilage or beyond for collection, or when a private 
party reveals the contents of a package. 


(U) Examples of Searches not Requiring.a Warrant because there is no Reasonable 

` Expectation of Privacy: (i) Vehicle identification numbers or personal- property that is exposed 
to public view and may be seen when looking through the window of a car that is parked in an 
area that is open to and accessible by members of the public; (ii) neither the examination of 
books and magazines in.a book store nor the-purchase of such items is a search or seizure under i 
the Fourth Amendment. See Maryland v. Macon, 472 U.S. 463 (1985); and (iii) a deliberate 
overflight in navigable air space to photograph marijuana plants is not a search, despite the 
landowners.subjective expectation of privacy. See California v. Ciraolo, 476 U.S..207 (1986). 


(U) Whether an area is curtilage is determined by reference to four factors: (i) proximity of the 
area in question to the home; (ii) whether the area is within an enclosure surrounding the home; 
(iii) nature of the use to which the area is put; and (iv) steps taken to protect the area from 
observation by passers-by. 
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(U) An area is curtilage if it “is so intimately tied to the home itself that it should be placed under 
the home’s ‘umbrella’ of Fourth Amendment protection.” 


11.4.4. (U//FOUO) Standards for Use and Approval Requirements for Investigative 
Method ; 


(U//FOUO) No Supervisory approval is required for the use of this method. However, if there is a 
doubt as to whether a person has a reasonable expectation of privacy in the area to be searched, 
consult with the CDC or-FBI Office of the General Counsel to determirie whether a search 
warrant is required. Use of this method must be documented in the case file. 
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11.5. (U) Investigative Method: Consensual Monitoring of Communications, including 
consensual computer monitoring 


11.5.1. (U) Summary 


(U) Consensual monitoring of communications may be used in predicated investigations. Its use, 
including consensual computer monitoring, requires review by the CDC or the OGC:.(AGG- 
Dom, Part V.A.4) eS 


(U//FOUO) Application: This investigative method may be used in national security 
investigations, criminal investigations and positive foreign intelligence collection cases, and for 
assistance to other agencies when it is not otherwise prohibited by AGG-Dom, Part IJI.B.2-3. 
This method cannot be used during an assessment 


(U//FOUO) Note: For those state, local and tribal governments that do not sanction or provide a 
jaw enforcement exception available to the FBI for one-party consensual recording of 
communications with persons within their jurisdiction; the SAC must approve the consensual 
monitoring of communications as an OIA. Prior to the SAC authorizing the OIA, one-party 
consent must be acquired. The SAC may delegate the OIA approval authority to an ASAC or 
SSA. - i ` 

11.5.2. (U) Legal Authority 


A. (U) The Fourth Amendment to.the United States Constitution and case law interpreting the 
same; i 


b. (U) 18 U.S.C. § 2511(2)(b) & (©); 


C. (U) The Foreign Intelligence Surveillance Act of 1978 (FISA), 50 U.S.C..§§ 1801 et seq., 
defines “electronic surveillance”'to include only those communications “in which a person 
has a reasonable expectation of privacy and a warrant would be required for law 
-enforcement purposes.” 50 U.S.C. § 1801(f). [fa party to the communication has consented 
to monitoring, a Title IIÍ or FISA court order iş not required to monitor those consensual 
communications; and 


D. (U) Computer Trespasser Exception - 18 U.S.C. § 2511(2)(i). 
11.5.3. (U) Definition of Investigative- Method 


(U) Consensual monitoring is: "monitoring of communications for which a court order or 
warrant is not legally required because of the consent of a party to the communication." (AGG- 
. Dom, Part VII.A.) Consensual monitoring includes the interception of the content of 
communications that typically fall into one of three general categories: 


A. (U) Conventional telephone communications or other means of transmitting the human voice 
through cable, wire, radio frequency (RF), or other similar connections; 


B. (U) Oral communications, typically. intercepted through the use of devices that monitor and 
record oral conversations (e.g., where a body transmitter or recorder or a fixed location 
transmitter or recorder is used during a face-to-face communication in which a person would 
have a reasonable expectation of privacy but for the consent, of the other party); and 
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C. (U) Communicatiofis transinitted between parties using computer protocols, such as e-mail, 
instant message, chat sessions, text messaging, peer-to-peer communications, or other 
“electronic communications,” as that term is defined in 18 U.S.C. § 2510(12). 


(U) The consensual monitoring of communications, including consensual computer monitoring, 
is subject to legal review by the CDC or. the OGC. (AGG-Dom, Part V.A.4) 


(U) The computer trespasser exception to the wiretap statute, 18 U.S.C. § 2511(2)(i),.relies on 
the corisent of the computer owner-operator and limits the monitoring to only the - 
communications of the trespasser. The statute includés additional limitations on the use of this 
provision: 


11.5.4. (U) Standards for Use and Approval Requirements for Investigative Method 
A. (U) General Approval Requirements 


(U//FOUO) Except aş provided below in Section 11.5.4.B, an SSA may approve the 
consensual monitoring of communications, including consensual computer monitoring of 
communications, if the information likely to be obtained is relevant to an ongoing 
investigation..SSA approval is conditioned.on the follows criteria being met and 
documented using the.ED-759: 





1. (U//FQUQ) Reasons for Monitoring: There is sufficient factual information 
supporting the need for the monitoring and that the monitoring is related to the 
investigative purpose, including, if applicable, a citation to the principal criminal statute 
involved; 


. (U//FOUO)-Legal Review: Prior to the initiation of the consensual monitoring, the 
CDC or the OGC concurred that consensual monitoring under the facts of the 
investigation is legal. Whenever the monitoring circumstances change substantially, a 
new FD-759 must be executed and the CDC or-OGC must be recontacted to obtain a 
new concurrence. (AGG-Dom, Part V.A.4.) The following are examples of substantial’ 
changes in monitoring circumstances which require anew FD-759: a different 


consenting party, new interceptees, or a change in the location of a fi xed: ‘monitoring 
device. 


. (U) Consent: -A party to the communication has consented to the monitoring and that 
consent has been documented according to the below-procedures. Consent may be 
express or implied. In consensual computer monitoring, for example, implied consent 
to monitor may exist if users are given notice through a sign-on banner that all users 
must actively acknowledge (by: clicking through) or through other means of obvious 
notice of possible monitoring. Consent to monitor pursuant to the computer trespasser 
exception isnot provided by a party to the communication-per se, but is instead. 


provided by the owner, operator; or systems administrator of the computer to, be 
monitored. 


- (U//FOUO) Subject: The monitoring will not intentionally’ ‘include a third-party who is 
not of interest‘to the investigation, except for unavoidable or inadvertent overhears. 


. (U/FOUO) Location of device: Appropriate safeguards exist to ensure that the 
consenting party remains a party to the communication throughout the course of 
monitoring. Ifa fixed-location monitoring device is being used, the conseriting party 
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has been admonished and agrces to be present during the duration of the monitoring 
and, if practicable, technical means are being used to activate monitoring only when the 
consenting party is present. 


Ead 


(U//FOUO) Location of monitoring: If monitoring will occur outside a Field Office’s 
territory, notice has been provided to the SAC or ASAC of each Field Office where the 
monitoring is to occur, and that notice has been documented in the.case file. 


N 


(U//FOUO) Duration: The-request states the length of time needed for monitoring. 
Unless otherwise warranted, approval may be granted for the duration of the: 
investigation subject to a substantial change of circumstances, as described in Section 
11.5.4.A.2, above. When a “sensitive monitoring circumstance” is involved, DOJ may 
limit its approval to a shorter duration: 


B. (U//FOUO) Exceptions Requiring Additional Approval 


l. (U//FOUO) Party Located: Outside the United States: 
(U//FOUO} 
b2 
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2. (U) Consent of More than One Party Required: 


(U//FOUO) For those states or tribes that do not sanction or provide a law enforcement 
exception available to the FBI for one-party consent recording of communications with 
persons within their jurisdiction, the SAC must approve the consensual monitoring of 


communications as an OIA. Prior to the SAC authorizing the OIA, one-party consent 


must be acquired. The SAC may delegate the OIA approval authority to an ASAC òr 
SSA. . 





3. (U) Sensitive Monitoring Circumstance: 


(U) Requests to consensually monitor communication 
circumstance is involved must be approved by the D 
. investigation concerns a threat to the national securi 
by the DOJ NSD. (AGG-Dom, Part V.A.4) A “sens 
defined in the AGG-Dom, Part VII.O, to include th 


s when a sensitive monitoring 

OJ Criminal Division, or if the 

ty or foreign intelligence collection, 
itive monitoring circumstance” is 

e following: 


a. (U) Investigation of a member of Congress, a federal judge, a-member of the 
Executive Branch at Execitive Level IV or above, or a person who has served in 


such capacity within the previous two years (Note: Executive Levels I through IV 
are.defined.in 5.U.S:C. §§ 5312-53 15); 


b. (U) Investigation of the Governor, Lieutenant Governor, or Attorney-General of 


any state or territory, or a judge or justice of the highest court of any state or 


territory, concerning an offense involving bribery, conflict of interest, or extortion 
related to.the performance of official duties; 


c. (U) The Attorney General, the Deputy Attorney 
General has requested that the FBI obtain 
- monitoring in a specific investigation; 


d. (U) A party to the communicati 
United States Marshal Service 
Witness Security Program. 


General, or an Assistant Attorney 
prior approval for the-use of consensual 


on is in the custody of the Bureau of Prisons or the 
or is being or.has been afforded protection in the 
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(UHFOUO) Note: See classified Appendix G for additional information regarding 
consénsual monitoring. 
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b2 
b7E 
11.5.6.  (U//FOUO) Specific Procedures _ 
(U/FOUO) The following procedures apply when obtaining consent, 
A. (U//FOUO) Documentir s consent ee a 
aa 
b2 
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11.5.7... (U/FOUO) Compliance and Monitoring 


(U//FOUO) ELSUR program personnel must-conduct regularly scheduled reviews of the FD- 
759s approved within the Field Office to determine whether approval was obtained prior to 
initiation-of consensual monitoring and to ensure that the monitoring occurred in compliance 
with the approvals. The ELSUR Program is also responsible for indexing all individuals or 
identifiers of persons-iritercepted during consensual monitoring and cross-referencing their 

, names or identifiers to the approved FD-759 in the investigative case file. 
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11.6. (U) Investigative Method: Use of closed-circuit television, direction finders, and 
other monitoring devices (Not needing a Court Order) 


(U) Note: Use of this method is subject to legal review by the CDC or OGC. 
11.6.1. (U) Summary 





11.6.2. (U) Legal Authority 

A: (U) AGG-Dom, Part V i 

B. (U) Tracking devices use (18 U:S.C. §:2510[12] [C}) 

C. (U) Rule 41 Federal Rules of Criminal: Procedure 

D. (U) Fourth Amendment to the United States. Constitution 
11.6.3. (U//FOUO) Definition of Investigative Method 


A. (U//FOUO) Closed Circuit Television (CCTV): a fixed-location' video camera that is 
typically concealed from view of that is placed’on or operated by a consenting party. 













excluded from Title III requirements (18 U.S.C. § 2510[12] [C])..In circumstances where a 
. court order is required (pursuant to FRCP Rule 41 {e}[2][B]), a judge or magistrate may 
authorize the use of an electronic tracking device within the jurisdiction of the court and 
- outside that jurisdiction, if the device is installed in that jurisdiction. (FRCP Rule 41 b[4];18 
U.S.C. § 3117. : - 
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b2 
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An example would be using thermal-imaging to detect heat emanating from 
within a home to make inferences about the use of high-powered marijuana-growing lamps 


inside the home (Kyllo v. United States, 533 U.S..27 (2001)). 


(U) Whether an area is curtilage is determined by reference to four factors: (i), proximity of 
the area in question to the home; (ii) whether the area-is within an enclosure surrounding the 
home; (iii) nature of the use to which the area is put; and (iv) steps taken to protect the-area 
fromi.observation by passers-by. ' 


11.6.4. (U//FOUO), Standards for Use and Approval-Requirements fòr Investigative 
Method 


(U//EOUO) When a video camera is physically operated as a hand-held video and is being used 
in an area in which no one has a reasonable expectation of privacy, its use is equivalerit to using 
a still camera.and does not require supervisory approval. 


(U//FOUO) For those situations that require SSA approval for the use of CCTV, tracking devices, ` 
and other monitoring devices, SSA approval, which should be documented using the FD-759, 
may be granted if the following criteria have been.met: ` 


A. (U//FOUO) Legal review and concurrence from the CDC or OGC that a court order is not 
required for installation or use of the device because there has been lawful consent, no 
reasonable expectation of privacy exists, or no physical trespass necessary to install the 
device. Note: Whenever circumstances change in either installation or monitoring, a new 


legal review should be obtained to determine whether a separate authorization is necessary. 
B. (U//FOUO) Use of the method is reasonably likely to achieve investi jecti 
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11.6.6.  (U//EOUO) Specific Procedures 


© (U//FOUO) To use the method, the case agent must: p2 
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b2 
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11.6.7. (U//FOUO) Compliance and Monitoring 


(U/FOUO) Authorization documents regarding the use of the CCTV, electronic tracking devices 
Paes be documentéd in the substaritive investigative ELSUR file 
and will be available for compliance and monitoring review. ; s 


133 
UNCLASSIFIED-FOR OFFICIAL USE ONLY 














UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


11.7. (U) Investigative Method: Polygraph 
11.7.1. (U) Summary 


(U) Legal Authority 
(U) AGG-Dom, Part V.A.6. 


11.7.3. (U//FOUO) Definition of Investigative Method 


(U//FOUO) The polygraph is used to: (i)-aid in determining whether a person has pertinent ` 
knowledge of a particular matter under investigation or inquiry; (ii) aid in determining the 
truthfulness of statéments made or information furnished by a subject, victim, witness, CHS, or 
an individual making allegations; (iii) obtain information leading to the location of evidence, 
individuals or sites of offense; and (iv) assist in verifying the accuracy and thoroughness of 
-information furnished-by-applicants and employees. ak : 


(U//FOUO) Note: This policy does not limit other authorized activities of the FBI, such as the 
FBI’s responsibilities to conduct background checks and inquiries concerning applicants and 
employees under federal personnel security programs. 


11.7.4. (U//FOUO) Standards for Use and Approval Requirements for Investigative 
Method. 
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11.7.6. | (U/FOUO) Specific Procedures 


(U//FOUO) An.EC must be prepared requesting SSA approval for the polygraph. If an AUSA is č 
assigned to the case; an FBI employee must confer with the USAO to discuss any prosecutorial 
issues prior to the administration of a polygraph. 


11.7.7, (U//FOUO) Compliance-and Monitoring mo, 
(U//FOUO) Except for polygraphs administered as part of a background chéck or as part of a 


federal personnel security. program, all polygraphs must be conducted under and documented to a 
substantive case file. 
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11.8. (U) Investigative Method: Undercover Operations 
11.8.1. (U) Summary 





(U//FOUO) Undercover operations must be conducted in conformity with The Attorney 
General’s Guidelines on Federal Bureau of Investi ation-Undercover Operations (AGG-UCO) 
in- investigations relating to activities in violation of federal criminal law that do not concern 
threats to the national security or foreign intelligence. In investigations that concern threats to the 
national security or foreign intelligence, undercover operations involving religious or political 
organizations must be reviewed and approved by FBI Headquarters, with participation by the 

~ NSD in the review process. (AGG-Dom, Part'V.A.7) Other undercover operations involving 





threats to the national-security or foreign intelligence are reviewed'and approved pursuarit to FBI 


policy as described herein. 





11.8.2. (U) Legal Authority 
A. (U) AGG-Dom, Part V.A.7 


B. (U) AGG-UCO - , 
11.8.3. (U//FOUO) Definition of Investigative Method 


A. (U//FOUO) An “undercover activity” is any investigative activity involving the use of an 


assumed identity by an undercover employee for an official purpose, investigative activity, or . 


function. An “undercover employee” is an employee of the FBI, another federal, state, or 
local law enforcement agency, another entity ofthe United States Intelligence-Community, or. 
another foreign intelligence agency working under.the direction and control of the FBI whose 
relationship with the. FBI-is concealed from third parties by the maintenance of a cover or 
alias identity for an official purpose, investigative activity, or function. 


B. (U//FOUO).An “undercover operation” is an operation that involves a series of related 
“undercover activities” over a period of time by an “undercover employee.” A series of 
related undercover activities consists of'more than five separate substantive contacts by an 
undercover employee with the individuals under investigation. In investigations relating to 
activities-in violation of federal criminal law that do not concern thréats to the national 
security or foreign intelligence, undercover activity involving sensitive circumstances, which 
are listed in the AGG-UCO and the FGUSO, constitutes.an undercover operation regardless 
of the number of contacts involved. A substantive contact is a communication, whether by 
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oral, written, wire, or electronic means, that includes information of investigative interest. 
Mere incidental contact (e.g., a conversation that establishes an agreed time and location for 
another meeting) is nota substantive contact within the meaning of this policy. 


. (U//FOUO) Distinction Between Sensitive Circumstance and Sensitive Investigative 


Matter: 


(U//FOUO) The term “sensitive investigative matter” as used in the AGG-Dom should not be 
confused with the term “sensitive circumstance” as that term is used in undercover operations 
or ELSUR matters. The term sensitive circumstance relates to a circumstance that arises in.an 
undercover operation that requires the UCO to obtain FBIHQ approval. A comprehensive list 
__ of sensitive circumstarices for criminal activities is contained in the AGG-UCO and for 
national security matters in Section 28 of the NFIPM. The Criminal Undercover Operations 
Review Committee (CUORC) and the national security Undercover Review Committee 
(UCRC) must review and approve undercover operations that involve sensitive 
circumstances, The detailed policy for undercover operations is described in this section of 
the DIOG, the Field Guide for Undercover and Sensitive Operations (F GUSO), and the 
FBIHQ substantive Division program implementation guides. 


11.8.4. (U//FOUO) Standards for Use and Approval Requirements for Investigative 


A. 


Method 


(U//FOUO) An official considering approval or authorization of a proposed undercover 
application must weigh the risks and benefits of the operation, giving careful.consideration to 
the following: 


l. 


(U//FOUO) The risks of personal. injury. to. individuals, property damage, financial loss to 
persons or business, damage to reputation, or other harm to persons; 


2, (U//FOUO) The risk of civil liability or other loss to the government; 


3. (U//FOUO) The risk of invasion of privacy or interference with privileged or confidential 


relationships and any potential constitutional concerns or other legal concerns; 


(U/FOUO) The risk that individuals engaged in undercover operations: may become 
involved in illegal conduct; 


(U//FOUO) The Suitability of government participation in the type of activity that is 
expected to occur during the operation. (AGG-UCO, Part IV.A,) 


- (U//FOUO) The following approval and authorization requirements apply to undercover 


operations relating to activities in violation of federal criminal law. that do not concern threats 
to the national security or foreign intelligence: 


1. 


2. 


(U//FOUO) An “undercover activity” in which an uridercover employee plans to meet 
with a subject requires the approval of the SSA. 


(U//FOUO) An “undercover operation” must be approved by. the SAC (or an ASAC with 
delegated approval authority). The CDC must review all undercover operations before 
approval and provide advice to the SAC regarding predication of subjects, entrapment 
issues, and whether the proposal meets the requirements of the AGG-UCO or.other DOJ 
and FBI policy guidance. : 


137 
UNCLASSIFIED-FOR OFFICIAL USE ONLY 











UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations.and Operations Guide 


- (U//FOUO) In addition to SAC approval, authorization from the responsible FBIHQ 


Assistant Director or Executive Assistant Director must be obtained if the undercover: 


operation involves a sensitive circumstance or certain fiscal circumstances, as those terms 


are defined in the AGG-UCO or other FBI guidance. 


(U//FOUO) Undercover Operations that involve a sensitive circumstancé (Group I 


undercover operations) require review by the CUORC as part of the authorization process: 
This requirement applies to both new and:renewal proposals. 


(U//FOUO) Undercover operations that do not involve a sensitive circumstance (Group II 
undercover operations) require notice to the appropriate FBIHQ substantive Unit and.to 


the Undercover and Sensitive Operations Unit following SAC approval. A renewal that 


would extend the operation beyond one year requires authorization from the responsible 
Assistant Director. $ 


(U//FOUO) All. Innocent Images Nationa! Initiative (INI) undercover operations deemed 


Group I and Group II operations require initiation and renewal approvals from FBIHQ, 


Cyber Division. Group I JINI undercover operations will also be reviewed by the 
CUORC. 


(U//FOUO) Requirements for.interim-approval and-emergency approval for undercover . 
Operations are contained in the FG USO. 


. (U/FOUO) The following approval requirements apply to undercover operations that 


concern threats to the national security or foreign intelligence: 


1. 


(U//FOUO) An “undercover operation” must be approved by the SAC (or an ASAC with 
delegated approval authority): The CDC must review all undercover operations before 
approval and provide advice to the SAC regarding predication of subjects, entrapment 
issues, and whether the proposal meets the requirements of ‘Section 28 of the NFIPM, or 
its successor, or other DOJ and FBI policy guidance. = 





- (U//FOUO) In addition to SAC approval, authorization from the responsible FBIHQ 


Assistant Director or Executive Assistant Director must be obtained if the undercover 
operation involves a sensitive circumstance, as defined in Section 28 of the-NF IPM, or its 
successor. j 





- (U//FOUO) Undercover Operations that involve a sensitive circumstance must be 


reviewed and authorized by the responsible Assistant Director (Group I operations). 
Review by the UCRC must precede such authorization. If the matter involves religious or 


. political organizations, the review must include participation by a representative of the 


DOJ NSD. (AGG-Dom, Section V; Section 28 of the NFIPM,.or its successor) 


(U//FOUO) Undercover operations that do not involve a sensitive circumstance (Group II 
undercover operations) must be forwarded to the appropriate substantive Unit at FBIHQ 
for review on a UACB basis prior to initiation of the operation. A renewal that-would 
extend the operation beyond 12 months requires authorization from the responsible 
Deputy Assistant Director or Assistant Director. ' 





; (U//F QUO) Requirements for interim approval and emergency approval for undercover 


operations are contained in Section 28 of the NF IPM, or its successor. 





> 
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11.8.5. (U) Duration of Approval 


i Á b2 
(U/FOUO b7E 


"11.8.6." (U) Additional Guidance 
A. (U//FOUO) b2 





b7E 
b2 
b7E 
b7E 
11.8.7. (U//FOUO) Compliance and Monitoring, and Reporting Requirements b2 


U//FOUO) All UCOs must provide a pasne summary usingthej |] b7E 
Cfo appropri aea m ae 
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11.9. (U) Investigative Method: Compulsory process as authorized by law, including 
grand jury subpoenas and other subpoenas, National Security Lètters 


15 U.S.C. §§ 1681u, 1681v; 18 U.S.C. § 2709; 12 U.S.C. § 3414(a)(5)(A); 50 U.S.C. § 436, and 
FISA orders (50 U.S.C. §§ 1861-63). 


. (U) Summary 






b2 
b7E 


b2 
b7E 


When collecting positive foreign intelligence, if the 
subject is a non-United States person, a request for business: records pursuant to 50 U.S.C. 
§§ 1861-63 is lawful. : 


11.9.1. (U) Federal Grand Jury Subpoena 
A. (U) Legal Authorities 


(U) A Federal Grand Jury is an independent panel charged with determining whether there is 
probable cause to believe one or more persons committed a particular federal offense within 
the venue of the district court. If the FGJ believes probable cause exists, it will vote a “true 
bill” and the person will be indicted. An FGJ indictment is the most typical way persons are 
charged with felonies in federal court. A FGJ can collect evidence through the use of an FGJ 
subpoena, which is governed by Rule 6 of the FRCP. FRCP 6(e) controls the release of 
information obtained by the prosecutor as part of the FGJ proceeding. FRCP 6(e) allows 
federal prosecutors to share valuable.foreign intelligence, counterintelligence, and terrorism- 
related threat information, and it is the DOJ’s policy that such information should be shared 
to the fullest extent permissible by law and in a manner consistent with the rule. The 
Attorney General has issued revised Guidelines for the Disclosure and Use of Grand Jury 
Information under Rule 6(e)(3)(D) (hereinafter “FGJ-Guidelines”). A memorandum issued 
by the Deputy Attorney General on May 15. 2008, provides amplifying guidance. 


140 
UNCLASSIFIED-FOR OFFICIAL USE ONLY 


UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


. (U//FOUO) Definition of Method 
(U/FOUO)-FGJ subpoenas are: demands for documents, records, testimony of witnesses, or 
- any other evidence deemed relevant by a sitting grand.jury. The FBI can request the issuance 


of an FGJ subpoena in coordination with the responsible United States A ev’s Office 
all criminal investigative matters 


FGJ subpoenas are limited to use prior to 
the indictment of the individual to whom the subpoena relates. ` 


- (U) Approval Requirements 
{U) There are ‘no-F Bl-supervisory-approval requirements, but all FGJ subpoenas must be 
issued by the United States Attorney’s Office that is handling the assessment or investigation 
to which the subpoenaed materials or witnesses are relevant. ; 


- (U) Duration of Approval 


(U) FGJ subpoenas include a “return date,” which is the date on which the subpoenaed 
materials or testimony is due to the grand:jury. 


. (U) Specific. Procedures 


(U) FGJ subpoenas ate governed by Rule 6(e) of the Federal Rules for Criminal Procedure 
and can only be obtained in coordination with the responsible United States Attorney’s 
Office or the appropriate DOJ Division. 


(U) Note: 28 C.F.R. § 50.10 requires the apptoval'of the Attorney General before a trial or 
FGJ subpoena may be issued toa third party to obtain the telephone toll records of a member 
of the news media, Specific Justification is required. Coordination with the Assistant United 
States Attorney handling the grand jury presentation or trial is necessary. Before proposing 
such.a subpoena, an agent should review 28 C.F.R. § 50.10. 
. (U) Notice and Reporting Requirements 

(U) There are no FBI notice or reporting requirements for FGJ Subpoenas. 

G. (U) Grand Jury Proceedings—Generally 


1. (U) Procedural Issues and Handling of FGJ Materials 
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‘(U) The FGJ makes its determination whether.to return a “true bill of indictment” based. 
on evidence presented by the prosecuting attorney in an ex parte proceeding. The grand 
jury operates under the direction and guidance of the-United States District Court. 
Generally, only witnesses for the prosecution testify before the grand jury. 


(U) Only the United States Attorney or an assistant, other DOJ attorneys prosecuting the 
matter, the witness under examination, an interpreter (as needed), and the stenographer or 
operator of a recording device may be present while the grand jury is in session. No judge 
is present during the presentation of evidence although the court will sometime rule on 
evidentiary issues-and will provide.initial instructions to the FGJ. No person other than 
‘the grand jurors may be present while the grand jury is deliberating or voting. 


2. (U) Restrictions on Disclosure 


(U) As a general. tule, no one other than a grand jury witness may disclose matters 
occurring before the gtand jury. Government agents, even if called as witnesses, may not 
disclose. matters occurring before the grand jury. 


3. U) Exceptions Permitting Disclosure 


a. (U) Disclosures by the government without the court’s permission. The 
government, through its attorney, may disclose grand jury matters under the 
following conditions: 


i.  (U).Under Rule 6(e)(3)(A), the government may disclose a grand jury matter to 
the following persons and in the following situations provided the government 
does not disclose the grand jury's deliberations or any ‘grand juror's vote and the 
government provides the court that impaneled the grand jury with the names of 
all persons to whom disclosure was made and certifies that the government has 
advised the receiving ‘party of the obligation of secrecy under this rule. 


(U) Persons eligible to.receive material under this subsection are: 1) an attorney 
for the government for-ise in performing that attorney's duty; 2) any 
government personnel,. including state, local, Indian tribe, or foreign 
government personnel that an attorney for the government considers necessary 
to assist in performing.that attorney's duty to enforce federal law; and 3)a 
person authorized under 18 U.S.C. § 3322. 


(U) Note: FBI OGG attorneys and CDCs aré not-"attorneys for the 
government." Under this Rule, FRCP 1 defines “attorney for the government” 
as “the Attorney General, an authorized assistant of the Attorney General, a 
United States Attorney, [and] an authorized assistant of the United ‘States 
Attorney.” 


ii. (U) An attorney for the government may disclose any grand jury matter to 
another Federal Grand Jury. 
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iii. (U) An attorney forthe government may disclose any grand jury matter 
involving foreign intelligence, counterintelligence, or foreign intelligence 
information to any federal law enforcement, intelligence, protective, 
immigration, national defense, or national security official to assist the official 
receiving thé information in the performance of that official's duties. The 
government attorney must file, under seal, with the court that impaneled the 
grand jury, a notice that such information was disclosed and the agencies or 
departments that received the information. As used in Rule 6(e), foreign 
intelligence information is information that relates to the ability of the United 
States to protect against actual or potential attack or grave hostile acts by a 
foreign power or its agents; sabotage or international terrorism by a foreign 
power or its agents or clandestine intelligence activities by an intelligence 
service or network of a foreign power or its agents, or information with respect 
to a foreign power or foreign territory that relates to the national defense or 
security of the United States or the United States conduct of foreign affairs. 


iv. (U) An attorney for the government may disclose any grand jury matter 
- involving, either in-the United States or elsewhere;-a threat of-attack or. other 

grave hostile acts of a foreign power or its agent, a.threat of domestic or 
international sabotage, or clandestine intelligence gathering activities by-an 
intelligence service or network of a foreign power or by its agent to any 
appropriate federal, state, local, Indian tribal, or foreign government official for 
the purpose of preventing or responding to such threat or activities. The 
government attorney must file, under seal, with the court that impaneled the 
grand jury, a notice that such information was disclosed and the agencies or 
departments that received the information. 


b. (U) Disclosures by the government requiring the Court’s permission. The 
government, through its attorney, may disclose grand jury matters under the 
following coriditions only with permission of the court. Petitions to make these 
disclosures are-generally, but not always, filed with the court that impaneled the 
grand jury. Unless the hearing on the government’s petition is to be ex parte, the 
petition must be served on all parties to the proceedings and the parties must be 
afforded a reasonable period of time to respond. 


i. (U) An attorney for the. government may petition for disclosure to a foreign 
court or prosecutor for use in an official criminal investigation. 


ii (U) An attorney for the government may petition for disclosure to a'state, local, 
-Indian tribal, or foreign government official, if the government attorney can 
show that the matter may disclose a violation of state, Indian tribal, or foreign 
criminal law, and the purpose of the disclosure is to enforce that law. 


iti, (U) An attorney for the government may petition for disclosure to an 
appropriate military official if the government attorney-can show the matter 
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may disclose a violation of military criminal law undef the Uniform Code of 
- Military Justice, and the purpose of the disclosure is to enforce that law. 


c. (U//FOUO) FBI’s Conduit Rule 


(U/FOUO) Only the federal’ prosecutor is authorized to make an initial disclosure of 
Rule 6(e)(3)(D) foreign intelligence information. As a practical matter, such ` 
~ disclosures are ordinarily accomplished through the FBI, which may have existing 
information-sharing mechanisms with authorized receiving officials. If the prosecutor 
intends to share information directly with another. official, consultation with the FBI 
is required to ensure that disclosures will be consistent with the existing policy of 
intelligence community agencies and-to ensure ap Dro f sensiti 





(U//FOUO) If, in cases of emergency, the prosecutor must disclose informatiori 
before consulting with thé FBI, the. prosecutor must notify the FBI as soon as 


practicable. 
d. (U) Other Limitations 


(U) Rule 6(e)(3)(D) does not eliminate certain other information protection 
requirements, such as restrictions on disclosures of tax returns, on certain financial 
information under the Right to Financial Privacy Act, and on classified information, 
to name only-a few examples. Specific statutes may impose additional burdens of 
disclosures. 


e. (U) Disclosure 


i. (U) An FBI employee may become a “Receiving Official,” the person to whom 
grand jury.information has been-disclosed, if the FBI receives grand jury 
information developed during investigations conducted by other agencies. A 
Receiving Official is any féderal, state, local, Indian tribal, or foreign 
‘government official receiving grand jury information, disclosed by an attorney 
for the government, under any provision of Rule 6(e)(3)(D). A Receiving 
Official may only use thie disclosed material as.necessary in the conduct of 
his/her official dutiés. The Receiving Official ordinarily must consult with the. 
federal prosecutor before disseminating the information publicly, including in 
open court proceedings. 


i. (U//FOUO) Receiving Officials may only use grand jury information in a 
manner consistent with the FGJ-Guidelines and any additional conditions placed 
on the use or handling of grand Jury information by the attorney forthe 
government. 
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(U//FOUO) If dissemination is necessary to the performance of his or her 
official dutiés, a Receiving Official may disseminate Rule 6(e)(3)(D) 
information outside of that official's agency to other government officials. 


- (U)A Receiving Official, other than a foreign government official; must consult 


with the attorney for the government before disseminating Rule 6(e)(3)(D) 
information publicly (including through its use in a court proceeding that is 
open to or accessible to the public), unless prior dissemination is necessary to 
prevent harm to life or property. In such instances, the Receiving Official shall 


- notify.the attorney for the government of the dissemination as soon as 


practicable. i 


(U) A foreign government Receiving Official must obtain the prior consent 
from the disclosing official where possible, or if the disclosing is unavailable, 
from the agency that disseminated the information to that foreign official before 
dissemination of the information to a third government or publicly. Public 
dissemination includes using the information in a court proceeding that is open 
‘to or accessible by the public. - Pe 


(U) A Receiving Official shall handle Rule 6(€)(3)(D) information in a manner 
consistent with its sensitivity and shall take appropriate measures to restrict 
access to this information to individuals who require access for the performance 
of official duties. : 


(U) A Receiving Official shall immediately report to the disclosing attorney for 
the government: any unauthorized dissemination of Rule 6(e)(3)(D) information 
or any loss, compromise, or. suspected compromise of Rule 6(e)(3)(D) 
information. 


(U) Violations 


(U) A Receiving Official who knowingly violates Rule 6(e)(3)(D) by using the 
disclosed information outside the conduct of his or her official duties, or by 
failing to adhere to any limitations on the dissemination of such ‘information, 
may be subject to contempt of court proceedings and to restriction on future 
receipt of Rule 6(e)(3)(D) information. 


- (U)A state; local, Indian tribal, or foreign government official who receives 


Rule 6(€)(3)(D) information, and who knowingly violates these guidelines, may 
be subject to contempt of court proceedings. 


(U) An attorney for the government who knowingly violates Rule 6(e)(3)(D) 
may be subject tò contempt of court proceedings. ` í 
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g. (U) Limitation on Unauthorized Disclosures, 








(U) Rule 6(e)(3)(D)(i) provides that Receiving Officials may use disclosed 
information only to conduct their “official duties subject to any limitation on the 
unauthorized disclosure of such information.” This “limitation on unauthorized 
disclosures” is understood to encompass applicable statutory, regulatory, and 
guideline restrictions regarding classification, privacy, or other information 
protéction, as well as any additional restrictions imposed by the federal prosecutor. 


(U//FQUO) Note: The FGJ-Guidelines do not require that the Receiving Official 
notify the fedéral prosecutor of subsequent disclosures, except for consultation for 
public disclosures and consent for certain disclosures by foreign officials. The 
Receiving Official is bound by whatever restrictions govern his or her use and 
disclosure of the information as part of his official duties. (Memo dated 5/1 5/08, 


Guidelines for the Disclosure and Use of FGJ Information under Rule 6felf3 DJ). 
meee arte Isciosure and Use of FGJ Information under Rule 6[e][3][D 


- (U/FOQUO) Limitation of Use.. 


i. (U//FOUO) Because of the restrictions involved in handling information that is b2 
obtained by the.use of a grand jury subpoena, whenever possible: alternatives to bIE 
the grand jaty subpoena, suoh asf o ES 
C should be considered as an alternative method of obtaining 
evidence. 


ü. (U) A grand jury subpoena may only be ušed for purposes of gathering 
information that is relevant to the grand jury’s investigation. Grand jury secrecy 
continues indefinitely, regardless of whether there is an indictment, unless the 
material becomes a matter of public record, such as by being introduced at trial. 


mee 


iii. (U) Rule 6(e)(3)(D) does not require notice to the court of subsequent 


dissemination of the information by Receiving Officials, 


iv. (U//FOUO) Disclosure of grand jury material cannot be made within the FBI for 
unrelated investigations unless a government attorney has determined that such 
disclosure to a particular investigator is needed to assist that attorney ina 
specific criminal investigation. The ability of government attorneys to freely 
share grand jury material with other government attorneys for related or 
unrelated criminal investigations does not extend to investigators without case 
specific authorization from the government attorney and notice to the court. 
Therefore, grand jury material must be restricted when placed into a general 
system of records that is freely accessible to FBI employees and others with 
access (e.g., ACS). 


v. (U//FOUO) Ifa government attorney authorizes the disclosure-of grand jury 
material in the possession of the FBI for use in an unrelated federal criminal 
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matter, such approval should be documented inthe grand juty subfile of both 
the initiated case file and the subsequent case file. That documentation will be 
in addition to any necessary supplementation to the government attorney's 
FRCP Rule 6(e) disclosure letter and/or to the internal disclosure list. 


(U//FOUO) The USAO should be consulted immediately for precautionary 
instructions if grand jury materiai will have application to civil law enforcement ~ 
functions (¢.g., civil RICO or civil forfeiture). There are very limitediexceptions 
that allow government attorneys to use grand jury material or information: in 
civil matters (e.g., civil penalty proceedings concerning banking law violations). 
These exceptions do not automatically apply to invéstigative personnel. 
Therefore, any similar use of grand jury information by the FBI must be 
approved in advance by the government attorney. 


(U//FOUO) Disclosure cannot be made without a court order for use in non-- 
criminal investigations, such as background. investigations or name checks. 


(U//FOUO) Government personnel who are preparing a response to a Freedom 
of Information Act.or Privacy Act request-may. properly‘access grand jury ~ 
material under.the Rule because they are considered to be.assisting the grand 
jury attorney by ensuring against any improper disclosure. 


i. (U) Matters Occurring Before the Grand Jury 


i. 





(U)-Core Grand Jury Material: There can be no dissemination of matters 
occurring before the grand jury unless such dissemination comes within one of 
the exceptions discussed above. There is no uniform legal definition of what 
constitutes matters occurring before the grand jury except for what is generally 
referred to as "core" grand jury material. “Core grand jury material” includes 
the following: (i) names of targets and witnesses; (ii) grand Jury testimony; (iii) 
gtand jury subpoenas; (iv) documents with réferences to grand jury testimony 
(including summaries and analyses); (v) documents that clearly reveal the 
intentions or direction of the grand jury investigation; and (vi) other material 
that reveals the strategy, direction, testimony, or other proceedings of a grand 
Jury. 


- (U) Documents Created Independent of Grand Jury but Obtained by 


Grand Jury. Subpoena: Rule 6(e) generally prohibits disclosing “matters 
occurring before the grand jury.” The rule, however, does not define that phrase. 
The issue of whether pre-existing documents fall within that prohibition has 
never been settled conclusively by the Suprenie Court, although many lower 
courts have discussed it at length. Courts generally agree that this prohibition- 
does not cover all information developed in the course of a grand jury 
investigation; rather, the secrecy rule applies only to information that would 
reveal the existence, strategy or direction of the grand jury investigation, the 
nature of the evidence produced before the grand jury, the views expressed by 
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members of the grand jury, or anything else that actually occurred before the 
grand jury. In addition, courts-have frequently held that Rule 6(e) does not 
protect documents subpoenaed from the government that are sought by third 
‘parties only for the information contained within the document rather than to 
determine the direction or strategy of the grand jury investigation. Due to 
developing law on this issue, FBI personnel should consult with the AUSA 
responsible to determine how to best handle these documents. ' 


iii. (U//FOUO) Data Extractéd from Records Obtained by Grand Ji ury 
Subpoena: Information-extracted from businéss records that was obtained by 
grand jury subpoena is often used to facilitate investigations. Some of that type 
of data is, by statute or case law, subject to “the Rule.” In other cases, 
determination of whether data must be considered subject to “the Rule” depends 
on the case law and local practice in the federal district. Information extracted 
from grand jury subpoenaed financial records subject to the Right to Financial 
Privacy Act of 1978 (12 U.S.C. § 3420) must be treated as grand jury material 
“unless such record has been used in the prosecution of a crime for which the 
grand jury issued an indictment or presentment....” With the approval.of the 
USAO, information-from subpoenaed telephone records may be-disclosed for 
use in unrelated federal criminal investigations in those districts where such 
material isnot considered-a “matter occurring before a grand jury.” If the 
USAO approves generally of this procedure, such:information may be used in 
unrelated criminal- investigations without authorization from a government 
attorney in edch instance. 


j. (U) Federal Grand J ury Physical Evidence and Statements of Witnesses 


i. (U) Physical evidence provided to the:government in response to a grand-jury 
subpoena is:subject to the secrecy rule regardless of whether such evidence is 
presented to the.grand jury. Physical evidence provided voluntarily or obtained 

by means other'than grand jury process (such as by a search warrant) is not a 

grand jury matter regardless of whether such évidence was previously or is 

thereafter presented’to the grand jury. , 


ii. (U) Statements of witnesses obtained as a result of grand jury process. including . 
grand jury subpoena, such as a Statement.given in lieu of grand jury testimony, 
are matters occurring before the grand jury irrespective of whether such 
witnesses testified before the grand jury or are not required.to testify. Voluntary 
statements of witnesses made outside of the grand jury context (not pursuant to 
any grand jury process including a grand jury subpoena), including statements 
made outside the: grand jury by a witness who is being prepared for grand jury 
testimony, are not grand jury matters irrespective of whether the witness 
préviously testified or will thereafter testify before the grand jury. 


iii. (U) Rule 6(€)(3)(B) requires a federal prosecutor who discloses grand jury 
material to government investigators and other persons supporting the grand 
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jury investigation to promptly provide the. court that impaneled the gtand jury 
the names of the persons to whom such disclosure has been made and to certify 
that he/she has advised such persons of their obligation of secrecy under the 
Rule. In order to document the certification required by the Rule, government 
attorneys often execute and deliver to the court a form, normally referred to as a 
“Certification” or “Rule 6(e) letter.” A copy of this document should be 
maintained with the grand jury material held in the FBI's custody. 


. (U//FOUO) Documentation of Internal Disclosures of Grand Jury Material: 


Grand jury material should be kept in such as fashion as to maintain the 
integrity of the evidence. Upon taking custody of grand jury material, the FBI 
employee should categorize it in a manner to identify its production source and 
how it was obtained, to include the identity of a-custodian of record for 
documentary evidence. Practical considerations often require agents assisting 
government attorneys to seek assistance in the same investigation from others 
within the FBI. In many districts, support personnel and supervisors of case 
agents need not be routinely included.in the list provided't6-the court. Inlieu-of 
a Rule 6(e) letter from the USAO containing an exhaustive list of names of FB] 


_ personnel, an FBI record of additional internal disclosures must be maintained 


by the case agent in order to establish accountability. Use of this "internal 
certification" procedure should be authorized by the appropriate USAO. The 
internal form should record the date of disclosure as well as the identity and 
position of the recipient, Such internal disclosures may be made only in support 
of the same ‘investigation in which a federal prosecutor has previously issued a 
Rule 6(é) letter. In addition, the internal record should reflect that all recipients 
of grand jury materials were advised of the secrecy requirements of Rule 6(e): 
Whenever practicable, recipients should be listed on this internal certification 
prior to disclosure, Local Rule 6(e) customs should govern the internal 
certification process used. i . 


- (U//FQUO) Storage of Grand Jury Material: The FBI cannot make or allow 


unauthorized disclosure of grand Jury material. Material arid records obtained 
pursuant to the grand jury process are frequently storèd in FBI space. FBI 
personnel should report any unauthorized disclosure to the appropriate 
government attorney who, in turn, must notify the court. In order to protect 
against unauthorized disclosure, grand jury material must be secured in the 
following manner: 


I. (U/FOUO) The cover, envelope, or-container containing grand jury - 
materials must be marked with the warning: "GRAND JURY MATERIAL - 
DISSEMINATE ONLY PURSUANT TO RULE 6()." No Grand Jury 
stamp or mark should be affixed to the original material. Agents, analysts 
and other authorized parties should work from copies of grand jury material 
whenéver possible to ensure the original material retains its integrity. 
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2. (U//FOUO) Access to grand jury material must be limited to authorized 
persons (e.g., those assisting an attorney for the government in a specific 
criminal investigation). All necessary precautions should be taken to protect 
grand jury material, to include maintaining the material in a secure location. 
when not'in use. The material must be appropriately segregated, secured, 
and safeguarded. Absent chain-of-custody considerations, grand jury 
material may be maintained in the 1A section of the file. Grand jury material - 
need not be kept in an evidence.or bulky exhibit room and may be entrusted 
to a support services technician (SST) or evidence control technician (ECT). 
Should grand jury material be entered into a computer database, the data 
must be marked with the 6(e) warning and maintained within the System in a 
restricted manner. 


. (U//FOUO) Registered mail or other traceable courier (such as Federal 
Express) approved by the Chief Security Officer (CSO) must be used to 
mail or transmit to other Field Offices any documents containing grand jury 
material. Couriers and other personnel employed in these services will not 
be aware of the contents.of the material transmitted because of the wrapping 
procedures'specified below, and therefore, then do-not require a background 
investigation for this purpose. The names of persons who transport the 
material need riot be placed on a disclosure list, but-the receiving office must 
provide the case agent in the originating office with the names of personnel 
in the receiving office to whom disclosure is made. 


. (U//FOUO) Grand jury material that is.to be mailed or transmitted by 
traceable courier outside a facility must be enclosed in opaque inner and 
outer covers. The inner cover must be a sealed wrapper or envelope that 
contains the addresses of the sender and the addressee, who must be 
authorized to have access to the grand.jury material. The inner cover must 
be conspicuously marked "Grand Jury Information To Be Opened By 
Addressee Only." The outer cover must be sealed, addressed, return 
addressed, and bear no indication that the envelope contains grand jury 
material. When the size, weight, or nature of the grand jury material 
precludes the use of envelopes or standard packaging, the material used for 
packaging or covering must be of sufficient strength and durability to 
protect the information from unauthorized disclosure or accidental exposure. 


. (U//FOUO) If the government attorney determines that the sensitivity of, or 
threats to, grand jury material necessitates a more secure transmission 
method, the material may be transmitted by an express mail service 

_approved for the transmission of national security information or be hand 
carried by the assigned government attorney or his or her designated 
representative. 


> (U/IF QUO) Grand jury material containing classified national security 
information must be handled, processed, and stored.according to 28 C.F.R. 
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Part 17. Grand jury material containing other types of sensitive information, 
such as federal tax return information, witness security information, and 
other types of highly sensitive information that have more stringent security 
requirements than that usually required for grand jury material must be 
stored and protected pursuant to the security regulations governing such 
information and any special security instructions provided by the 
organization that originated the information. i 


7. (U//FOQUO) Original documents that are obtained through the grand jury 
process should be returned to the attorney for the government or, with the 
government attorney's permission, to the owner if there is no indictment or 
the prosecution has concluded. 


k. (U) Requests for Subpoenas in Fugitive Investigations 


(U//FOUO) It is generally a misuse of the grand jury to use the grand jury as an 
investigative aid in the search for a fugitive. Therefore, with the exceptions 
discussed below, grand-jury subpoenas for testimony or records‘related‘to the - 
fugitive’s whereabouts may not be requested in FBI fugitive investigations. 


i. (U//FOUO) Grand jury process may be used to locate a fugitive if the grand jury 
is interested in hearing the fugitive's testimony. Thus, if the grand jury seeks the 
testimony of the fugitive in an investigation that the grand jury is.indicting; the 
grand jury may subpoena other witnesses and records in an effort to locate the 
fugitive witness. However, interest in the fugitive's testimony: must not be a 
pretext. The sole motive for inquiring into the fugitive's location must be the 
potential value of fugitive's testimony to the grand jury’s investigation. A 
Subpoena for the fugitive witness must be approved. by the grand jury before 
seeking to subpoena witnesses or records to locate the fugitive. Further, it isnot ` 
proper to seek to obtain grand jury testimony from any witness, including a 
fugitive, concerning an already-returned indictment. Thus, it would not be proper 
to seek to locate a fugitive for the purpose of having the fugitive testify about 
matters for which an indictment-has already been returned, unless there are 
additional unindicted defendants to be discovered or additional criminal acts to be 
investigated through the testimony of the fugitive. Current.policy on "target" 
witnesses must be observed. Grand jury, subpoenas for witnesses and records 
aimed at locating a fugitive witness who is a target of the grand jury investigation 
should be sought only where a target subpoena for the fugitive has already been 
approved by the responsible Assistant Attorney General. 


ii. (U//FOUO) Use of the grand jury to learn the present location of a fugitive is also 
proper when the present location is an element of the offense under inyestigation. 
On adequate facts, the present location of a fugitive might tend to establish that 
another person-is harboring the fugitive, or has committed misprision, or is an 
accessory after the fact in the present concealment of the fugitive. However, this 
justification would likely be viewed as a subterfuge if the suspected harborer or 
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the person potentially guilty of misprision or as an accessory weré given 
immunity in the grand jury in order to compel his/her testimony about the location 
of the fugitive. With regard to escaped federal prisoner and bond default matters, 
the present location of a fugitive is not relevant evidence in a grand jury 
investigation because these offenses address the circumstances of a prior 
departure from a known location. The fugitive's present location is not a relevant 
factor as it'is in harboring or as it may be ina misprision investigation. Inasmuch 
as unlawful flight to avoid prosecution cases are, as a rule, not prosecuted and 
cannot be prosecuted without written authorization from the Attorney General or 
an Assistant Attorney General, any effort to use the grand jury in the investigation 
of such cases must be preceded by consultation with thé DOJ and by written 
authorization to prosecute from the Assistant Attorney General in charge of the 
Criminal Division. 


11.9.2. (U) Administrative Subpoena 
A. (U) Summary 


(U) The Attorney General of the United States is vested with the authority to issue 
administrative subpoenas_under two provisions of the United:States-Code that have-relevance 
to FBI criminal investigations, 21 U.S.C. § 876 and 18 U:S.C. § 3486. The FBI has no 
inherent authority to issue administrative subpoenas but relies on delegated authority from 
the Attorney General. The use of administrative subpoenas is limited to three categories of 
investigations—drug program investigations, child sexual exploitation and abuse 
investigations, and health-care fraud investigations—and may not be used for any other 


purpose. The delegated authority varies depending on the federal violation being investigated. 


The type of information that can ‘be obtained using.an administrative subpoena is also limited 
by law or by policy of the Attorney General. 


‘(U//FOUO) Note: Within the FBI, the authority to issue administrative subpoenas is limited 
to those positions holding the delegated authority from the Attorne General; that authority 
may not be redelegated. 








B. (U) Legal Authority and’ Delegation 


1. (U) Investigations involving the sale, transfer, manufacture or importation of 
unlawful drugs f 


(U) Authority: 21 U.S:C. § 876 and DOJ.Regulation at 28 C.F.R. App to Pt. 0, Subpt. R 
§ 4. 


(U) May be issued to:. Any individual or business: holding records relevant to the.drug 
investigation. : 


(U) Records to be obtained: Any records relevant to the investigation. 


(U//FOUO) Delegated authority to issue: By DOJ regulation, the Attorney General’s 
delegation includes SACs, ASACs; SSRAs and “those FBI Special Agent Squad 
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Supervisors who have management responsibilities over Organized Crime/Drug Program 
investigations.” 


(U//FOUO 


b2. 
b7E - 








b2 
The Right to Financial Privacy Act limitations b7E 
described in paragraph D of this section apply. If addressed to a provider of “electronic 
communication servicė” dr å“remote computing service,” provisions in the Electronic 
Communication Privacy Act (ECPA) govern, as discussed in paragraph D of this section. . 
: (U) Investigations involving the sexual exploitation or abuse of children 
(U) Authority: 18 U.S.C. § 3486(a) and Attorney General Order 2718-2004. 
(U) May be issued to:. A “provider of ari electronic communication service” or a “remote 
computer service” (both terms defined in Section 1 1.9.2.D.2.b, below) and only for the 
‘production of basic subscriber or customer information. The subpoena may require 
production as soon as possible but iri no event less than 24 hours after service of the 
subpoena. , 
(U) Records to be obtained: 
b2 
b7E 
b2 
b7E 


(U//FOUO) Limitations: By law, these administrative subpoenas may only be issued in 
cases that involve a violation of 18 U.S.C. §§ 1201, 2241(c), 2242, 2243, 2251, 2251A, 
2252, 2252A, 2260, 2421, 2422, or 2423. in which the victim has not attained the age of 
18 years. Under the Attorney General’s delegation, an administrative subpoena in these 
investigations may be issued-only to “providers of electronic communication services” or 


to “remote computing services” to obtain the information listed above. These 
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administrative subpoenas may not be issued to any other person or entity or to-obtain an 
other information, including the content of communication 





b2 | 
b7E 





3. (U) Investigations involving Federal Health Care Fraud Offenses 
(U) Authority: 18 U.S.C. § 3486(a) 


(U) Records to be obtained: Records relevant to an-investigation relating to a.“federal 
health care offense.” Federal health care offense is defined in 18 U.S.C. § 24 


(U) May be issuèd to: Any public or private entity or individual with records relevant to 
the federal-health care offense. (Note: These are referred to in guidance issued by the 
Attorney General as “investigative demands:”) : 


(U//FOUO) Delegated authority to issue: There is no delegation to-the FBI. Delegated 
to personnel within DOJ’s Criminal Division and'to United States Attorneys, who may 
redelegate the authority to Assistant United States Attorneys. 


(U) Limitations: The Right to Financial Privacy Act (RFPA) limitations described in 
paragraph D of this section apply. The provisions in ECPA govern, as discussed in 
paragraph D of this séction, if:thé request for records is addressed to a “provider of 
electronic communication.service” or a “remote:computing service.” The subpoena may 
not require:the production of records at a place more than 500 miles from the place the 
subpoena is.served. 








b2 
b7B' 


(U) Restriction on individual health care information: Pursuant to 18 U.S.C. § 3486, 
health information about an individual acquired through an authorized investigative 
demand.may not be used in, or disclosed to any person for use in, any administrative, 
civil, or criminal action against that individual unless the action or investigation arises 
from and is directly related to receipt of health care, payment for health care, or action 
‘involving a fraudulent claim related to health care. 


Gov 2 ee 


b2 
b7E 





C. (U) Approval Requirements 





(U//FOUO) Use of.an administrative subpoena-requires SSA approval. The SSA may issue 
the administrative subpoena if the authority-has been so delegated. Further review and 

" approval may be required depending on the delegation. Review by the CDC is appropriate if 
legal questions arise in preparing and issuing the subpoena. 


(U/FOUO) Note: An individual designated by proper authority to serve in.an “acting” status 
in one of the positions with delegated authority may sign and issue an administrative 
subpoena. The “acting” statis should be documented in an appropriate Field Office 
administrative-file and noted in the case file. For example, if the ASAC with authority to sign 
is away on.leave or temporary duty and another individual has been designated by the SAC 
to serve as “acting” ASAC, that individual has authority to issue the administrative subpoena. 
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A relief supervisor is not considered to be in an “acting” status for purposes of issuing an 
administrative subpoena. 


D. (U) Limitations on Use of Administrative Subpoenas 


1. (U) Financial Privacy Limitations 


a. 





a. 


(U) Obtaining records from a financial institution. “Financial records” are those 
records that pertain to a customer’s relationship with a financial institution. The 
term “financial institution” is broadly defined as a bank, savings bank, card. issuer, 
industrial loan company, trust company, savings association, building and loan or 
homestead association, credit union, or consumer finance institution, located in any 
state, territory, or the District of Colimbia. See 12 U.S.C. § 3401. [Note: The scope 


‘of the RFPA’s definition of-financial institution for this purpose, which limits the 


restrictions the RFPA places on federal law enforcement in using an administrative 
subpoena, is narrower than the definition of financial institution that is used in 
connection with NSLs. For that purpose, the RFPA refers to the broader definition 
found in the Bank Secrecy Act (BSA). Among the entities included in the BSA 


‘definition are money transmitting businesses, car dealers, travel agencies, and 


persons involved in real estate closings. See 12 U.S.C. § 3414(d) and 31 U.S.C. 
§.5312.(a)(2).a¥id (c)(1).]. When-seeking financial-records-from a financial 
institution, the FBI must send a certificate of compliance required by 12 U.S.C. 

§ 3403 to the financial institution. The certificate must indicate, among other things, 
that notice has been provided by the FBI to the individual customer whose financial 
records are to be obtained. The content of the notice is set out in 12 U.S.C. § 3405. 
A court order may be obtained that allows for delayed notice pursuant to 12 U.S.C. 
§ 3409. Notice is not required if the administrative subpoena is issued to obtain the 
financial records of a corporation or for records not pertaining to a customer. Notice. 
is also not required if the administrative subpoena seeks orily basic account 
information, defined as name, address, type of account, and account number. See 12: 
U.S.C. § 3413(g). 


(U) Obtaining records from a Credit Bureau. A credit bureau or consumer 
reporting agency may-only provide name, address, former addresses, place of 
employment and former place of employment in response to an administrative 
subpoena. 15 U.S.C. § 1681f. A credit bureau or consumer reporting agency may 
not release financial information in a credit report or consumer. report, or the names 
and locations of financial institutions at which the consumer has accounts pursuant 
to an administrative subpoena. A court order, a grand jury subpoena, or, in an 
appropriate case, a national security letter may be used to obtain this information. 
15 U.S.C. § 1681b. Notice of disclosure will be provided by the credit bureau or 
consumer reporting agency to the-consumer if the consumer requests this 
information. i 


2. (U) Electronic Communication Privacy Act 


(U) Use of an Administrative Subpoena. The ability to gather subscriber 
information and the content of electronic communications using an administrative 
subpoena is governed by ECPA. In cases involving the sexual exploitation-or abuse 
of children, only basic subscriber ot customer information may be obtained with an 


155 : 
UNCLASSIFIED-FOR OFFICIAL USE ONLY 





UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations:and Operations Guide 


administrative subpoena under the terms of the Attorney General’s delegation, as 
described above. No content information may be obtained. In drug and health care 
fraud investigations, ân administrative subpoena may be used to obtain basic 
subscriber or customer information and certain stored communications, under 


limited circumstances, from entities that provide electronic communication services 
~- to the public. 


b, (U) Definitions. ECPA applies to two types of entities that provide electronic 
communications to the public: The term “provider of electronic communication 
services” is defined in 18 U.S.C. § 2510(15) as “any service that provides the user 
thereof the ability to send or receive wire or electronic communications.” The term 
“remote computing services” is defined in:18 U.S.C. § 2711(12) as the “provision 


to the public of computer storage orprocessing services by means of an electronic 
communication system.” ` 


c. (U) Subscriber information. 


b2 
b7E 





d.. (U) Records or other information pertainin 





to a subscriber. 






‘b2 
b7E 


e. (U) Content. Content is the actual substance of files stored in an account,. including 
the subject:line of an e-mail. 


(1) (U) Unopened e-mail held in storage for 180 days or less may not be obtained 
using an administrative subpoena. A search.warrant is required. . 


. (2) (U) Unopened e-mail that has been held in electronic storage for more than 180 
days may be obtained with an administrative subpoena. (In the Ninth Circuit, 
the opened e-mail-and un-opened e-mail must have been in storage for 180 days 
before it can be obtained with an administrative subpoena. See Theofel v. 
Farey-Jones, 359 F.3d 1066.) The government must provide notice to the 
subscriber or customer prior to obtaining such content. A limited exception to 
the notice requirement is provided in 18 U.S.C. § 2705. 











- (3) (U) E-mail that has been opened andthe content of other electronically stored 
files held in storage by-an entity that provides storage services tothe public. (i.e., 
a remote computing service, as defined in 18 U.S.C. § 271 1), may be obtained 
using an administrative subpoena with notice to the customer or subscriber, 
unless notice-is delayed in accordance with 18 U.S.C. § 2705. 
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(4) (U) E-mail that has been opened.and the content of other electronically stored 
files held in storage by an entity that does not provide electroriic communication 
services to the public, such as that on the internal network of a business, may be 
obtained using an administrative subpoena. Notice to the individual is not 
required because this demand is not restricted by PELA; 


3. (U//FOUO) Members of the Media ` 


(U//FOUO) An administrative subpoena directed to a pider of electronic 
communication services or any other entity seeking to obtain local and Jong distance 
connection records, or records of session times of calls, made by a member of the news 
media may only be issued with the specific approval of the Attorney General. Requests 
for this approval should be reviewed by the CDC and coordinated with an Assistant 
United States Attorney (AUSA). The request must provide justification for issuance of 
the subpoena consistent with the Department of Justice policies set forth in 28 C.F.R. 

§ 50.10. Guidance on this policy may be obtained from the Investigative Law Unit and/or 
the Privacy and Civil Liberties Unit, OGC. . 


E. (U//FOUO) Compliance/Monitoring 


1. (U) Limits on-use. 


3. (U//FOUO) Factors for compliance. The following factors should be considered to 
ensure compliance with applicable laws and regulations that govern the FBI’s use of 
administrative subpoenas: ; 


a. (U//FOUO) The administrative subpoena must relate to a type of investigation for 
which the subpoena is authorized; 


b. (U//FOUO) The administrative subpoena must be directéd to a recipient to whom 
an administrative subpoena-is authorized; 


“ce. (U//FOUO) The administrative subpoena may request only records that are 
authorized under the pertinent law; 
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d. (U//FOUO) The administrative subpoena must be approved by an authorized 
official; 


e. (U//FOUO) The administrative subpoena must be uploaded into the Automated 
Case Support (ACS) system to the Subpoena (“SBP”) subfile of the substantive 
case file for record purposes; 


f. (U//FOUO) The return of service information must be completed on the back of 
the original administrative subpoena; 


g. (U//FOUO) The original administrative subpoena and completed return of service 
must be maintained in a "SBP" subfile of the substantive investigation; and 


h. (U//FOUO) The records provided in response to the.administrative subpoena must 
be reviewed to ensure that the FBI is authorized to collect the records provided. If 
an over-production has occurred, steps must be taken to correct the error. 


11.9.3. (U).National Security Letter 
A. (U) Legal Authority : 
(U) 15 U.S.C. §§ 1681u, 1681v; 18 U.S.C. § 2709; 
(U) IFU:S.C. §3414(a) (5) (A); 50 U:S.C. § 436; 
(U) AGG-Dom, Part V 
(U) A National Security Letter (NSL) may be used only to request: 
1. (U) Financial Records; The Right to Financial Privacy Act(RFPA), 12 U.S.C. 


§ 3414(a)(5); 
2. (U) Identity of Financial Institutions: Fair Credit Reporting Act (FCRA), 15°U.S.C. 
§ 1681u(a);- , 


3. (U) Consumer Identifying Information: FCRA, 15 U.S.C. § 1681u(b); 


4. (U) Identity of Financial Institutions and Consumer Identifying Information: F CRA, 
15 U.S.C. §§ 1681u(a) & (b); 


5. (U) Full Credit Reports in International Terrorism Investigations: FCRA, 15 U.S.C. 
§ 1681v; and- $ 


6. (U) Telephonė Subscriber Information, Toll Biling Records, Electronic 
Communication Subscriber Information, and Electronic Communication 
Transactional Records: Electronic Communications-Privacy Act (ECPA), 18 U.S.C. 
§ 2709. 


B. (U) Definition of Method 


(U) A National Security Letter is an administrative demand for documents‘or records that can 
be made by the FBI during a predicated investigation relevant to a threat to the national 
security.’ Sample NSLs are available. 


C. (U//FOUO) Approval Requirements 


(U//FOUO) A request for an NSL has two parts. One is the NSL itself, and one is the EC 
approving the issuance of the NSL. The authority to sign NSLs has beeri delegated to the 
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Deputy Director, Executive Assistant Director and Assistant EAD for the National Security 
Branch; Assistant Directors and all DADs for CT/CD/Cyber; General Counsel; Deputy 


General Counsel for the National Security Law Branch; Assistant Directors in Charge in NY, 
DC, and LA; and all SACs. 


(U//FOUO) In addition to being signed by a the statutorily-required approver, every NSL 


must be reviewed and approved by a CDC, ADC or attorney acting in that capacity, or an 
NSLB attorney. | 





(U//FOUO) 


(U//FOUO 


Post | 


(U//FOUO 


(U/FOUO)f > 


| 
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D. (U) Duration of ee R A 


b2 
E. k 


b2 
b7E 








aR Iae OUS oUo) Specific Procedures 


b2 
b7E 


U/FOUO b2 
"  bIE 
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b2 
b7E 


b2 
b7E 


b2 
(U/FOUO) b2 





b2 
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2. (U) Copy of NSL 


(U//F OUO) A copy of the signed NSL must be retained in the investigative case file and 
uploaded under the.appropriate NSL document type in ACS. Documented proof of 
- service of NSL letters must be maintained in the case file. 


. (U//FOUO) Second.Generation Information 


(WIFOUDY o S 


. (U//FOUO) Emergency Circtimstances 


(U//FOUO) ECPA protects subscriber or transactional information regarding 
communications from disclosure by providers of telephone or other electronic 
communication sérvices. Generally, an NSL, grand jury subpoena, or other forms.of legal 
process must be used to compel the communication service provider to disclose 
subscriber or transactional information. In emergency circunistances, however, if the 
provider in good faith believes that a delay in disclosure could pose a danger of death or 
serious bodily injury, the provider may voluntarily disclose information to the FBI. As a 
matter of FBI policy, when there is a danger of death or serious bodily injury that does 
not permit the proper processing of an NSL, if approved by an ASAC, a letter to the 
provider citing 18 U.S.C. § 2702 may-be used to request emergency disclosure. If time 
-does not permit the.issuance of an emergency letter citing 18 U.S.C. § 2702, an.oral 
request to the providér may be made, but the oral request must be followed-up with a 
letter as described herein. 


(U//FOUO) 


G 
| 
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_ (U//FOUO 


F. (U//FOUO) Notice and Reporting Requirements 


‘(U//FOUO) The National Security Law Branch at FBIHQ is required to report information 
-about NSL usage to Congress. The-data necessary for Congressional reporting is a 
automatically recorded if the NSL is created in the NSL Subsystem (FISAMS). If the NSL is 
created outside the system, the EC must include all information necessary for NSLB 
accurately -to report NSL statistics. The EC must break down the number of targeted phone 
numbers/e-mail accounts/financial accounts that are addressed to-each and every NSL 
recipient. Therefore, if there are three targets, ten accounts, and six recipients of an NSL, the 
EC must state how many: accounts are the subject of the NSL as to Recipient 1, Recipient 2, 
etc. It is not sufficient to only indicate that there are ten accounts and six recipients. 


(U//FOUO) In addition, the FBI must report the United: States person status of the subject of 
‘all NSL requests (as opposed to the target of the investigation to which the NSL is relevant), 
other than those seeking subscriber information. While the subjéct is often the target ofthe 
investigation, that is not always the case. The EC must reflect the United States person status. 
of the subject of the request — the person whose information the FBI is seeking. If the NSL. is 
seeking information about more than one person, the EC must reflect the United States 
person status of each of those persons. (See the form ECs, which make clear that the United 
States person status applies to the target of the request for information.) 


(U//FOUO) Finally, to enstire accurate reporting, the EC must accurately state the type of 
information that is being sought. NSLs for toll billing-records or transactional records will: 
include subscriber information. The EC need only state that the request is for toll billing - 
records or-transactional records, and the reporting paragraph should state that toll billing or 
transactional records are being sought for x number of accounts, and, if multiple recipients, 
from-each of recipients #1, #2, etc. 


. (U//FOUO) Receipt of NSL Information | 


Uoue EE e eee 
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H. (U//FOUO) Dissemination of NSL material 
(U//FOUO) Subject to certain statutory limitations, information obtained through the use of 
an NSL may be disseminated according to general dissemination standards in the AGG-Dom. 
ECPA (telephone and electronic communications records) and the RFPA (financial records) 
permit dissemination if consistent with the AGG-Dom and if the information is clearly 
relevant to the responsibilities of the recipient agency. FCRA, 15 U.S.C. §.1681u, permits 
dissemination to other federal agencies as may be necessary for the approval or conduct of a 
foreign counterintelligence investigation. FCRA imposes no special rules for dissemination 
of full credit reports. : 
b2 
b7E 
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I. (U) Payment for NSL-Derived Information 


(U//FOUO) Because there is no legal obligation for the FBI to compensate recipients of 
NSLs issued pursuant to ECPA, 18 U.S.C. § 2709 (toll billing records information, 
subscriber, electronic communication transactional records) or FCRA, 15 U.S.C..§ 1681v, 
(full credit reports in international terrorism cases), there should not be payment in 


connection with those NSLs. See EC, 319X-HQ-A1487720-OGC. serial 222, for'a form 


letter to be sent-in response to demands for payment for these types of NSLs. 


_(U) Compensation is legally required for NSLs served to obtain financial information 
pursuant to RFPA, 12 U.S.C. § 3414(a)(5), and credit information pursuant to. FCRA, 15 
U.S.C. § 1681u. Under 12 C.F.R. § 219.3, Appendix A, a fee schedule has been adopted 
under which photocopying is reimbursable at $.25 per page and searching is reimbursable at 
$11 per hour for clerical staff, Regulations governing a payment schedule for FCRA, 15 
U.S.C. § 1681u, NSLs has not been promulgated, 


11.9.4. (U) Business Record Under FISA 
A. (U) Legal Authority 

(U) 50 U.S.C. §§ 1861-63 
B. (U) Definition of Method 


(U) A FISA order for business records is an order for a third party to produce documents, 
records and other tangible information relevant to'a prédicated national security investigation. 
FISA Business Record Orders may not be-used to obtain information during a positive 

foreign intelligence case if the material sought relates to a United States person. There is no 
“FISA-derived” impediment to the use of documents obtained pursuant to such orders. 


C._(U//FOUO) Approval Require 








b2 
b7E 


D. (U) Duration of Approval 
(U) Duration is established by the court order. 
E. (U) Notice and Reporting Requirements 


(U) There are.no special notice or reporting requirements. 


‘ 165 % 
UNCLASSIFIED-FOR OFFICIAL USE ONLY 





UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 







F. (U) Compliance Requirements 


(U) The case agent,who receives 
‘order must do the following: 






production of documents pursuant to a FISA business records 







1. (U//FOUO) Handle the production as required by the Standard Minimization 


b2 
Procedures Adopted for Business Record Orders b7E 






2. (U) Whether or not required by 
received into FBI databases, revie 
are responsive to the order. ` 


_paragraph L prior to uploading the documents or data 
w the documents produced to determine whether they 









a. (U//FOUO) If the producing party has mistakenly provided material that is 

entirely non-responsive (e.g., the producing party inverted numbers:on an account 
‘and produced entirely irrelevant and non-responsive material), the case agent 

must sequester the material and discuss with the CDC or NSLB the appropriate 


way to return the unresponsive. material to the producing party and obtain the 
responsive material. 


b. (U//FOUO) If the producing party has produced responsive material and 
material that is beyond the parameters of the order issued by the FISC (e.g., the 
FISC ordered production of one month’s records and the party-produced records 
for 6 weeks), the case agent must determine whether the material produced that is 
outside the parameters of the FISC order is subject to statutory protection (e.g., 
records.that are subject to the Right to Financial Privacy Act, the Buckley 


Amendments, the Electronic Communications Privacy Act; Fair Credit Reporting 
Act). ` 















i. (U/FOUÒ) If the overproduced material is subject to statutory 
protection, then the overproduced material must’be treated like 
overproduction is treated in the contextof a national security letter. 







ii, (U//FOUO) If the overproduced materiál is not subject. to statutory 
protection, then it may be uploaded. In.determining whether to-upload the 
-overproduced material, the case agent should consider the extent to which 
the overproduction includes non-public.information regarding United 
States persons who are not the subject ofa national. security investigation; 
the sensitivity of the information contained within the overproduction; and 


the burdensomeness of separating the overproduced material from the 
responsive material. 
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11.10. (U) Investigative Method: Accessing stored wire and electronic communications and 
transactional records in conformity with chapter 121 of title 18, United States Code 


11.10.1. (U) Summary 


(U//FOUO) FBI employees may acquire the contents of stored wire or electronic 
communications and associated transactional records—including basic subscriber information— 
as. provided in 18 U.S.C. §§ 2701-2712. Requests for voluntary disclosure under the.emergency 
authority of 18 U.S.C. § 2702 require prior approval from the Field Office ASAC or FBIHQ 
Section Chief when appropriate. 


(U//FOUO) Application: This investigative method may be used during national security 
investigations and criminal investigations as authorized by statute. This method may not be used 
for assistance-to other-agencies, unless relevant to an already open predicated investigation. This 
method cannot be used to collect positive foreign intelligence. Additionally, this method cannot 
be used during an assessment. : 


A. (U) Stored Data: The Electronic Communications Privacy Act (ECPA)—18 U.S.C. 
§§ 2701-2712—governs the disclosure of two broad categories of information: (i) the 
cofitefits of wire or-electronic-cornmunications held in-“electronic storage”*by providers of 
“electronic communication service” or contents held by those who provide “remote 
computing service” to the public; and (ii) records or other information pertaining to a 
subscriber to or customer of such services. The category of “records of other information” 
can be subdivided further into subscriber records (listed in 18 U.S.C. § 2703 [c}[2]) and 
stored traffic data or other records. i 


(U) Records covered by ECPA ‘include all records that are related to the subscriber, including 
buddy lists, “friend” lists (MySpace), and virtual property owned (Second Life). These other 
sorts-of records are not subscriber records and cannot be obtained by a.subpoena under 18 
U.S.C. § 2703(c)(2) or an NSL under 18 U.S.C. § 2709. 


B. (U) Legal Process: The legal process for obtaining disclosure will vary depending on the 
type of information sought and whether the information is being voluntarily provided under 
18 U.S.C. § 2702 (e.g., with consent or when emergency circumstances require disclosure) or 
the provider is being compelled to provide the information under 18 U.S.C. § 2703, as 
outlined below. 


C. (U) Contents held in “electronic storage” by a provider of “electronic communication 
service” for 180 days or less can only, be obtained with a search warrant based on probable 
cause. Accordingly, such records may only be obtained during a full investigation.’ 


(U) Contents held by those who provide “remote computing service” to the public and 
contents held in “electronic storage” for more than 180 days by an “electronic: 
communication service” provider can be obtained with: a warrant;‘a subpoena; or an order 
issued by a court under 18 U.S.C. § 2703(d) when prior notice has been provided to the 
customer or subscriber (unless the court has authorized delayed notice). 


(U) Title 18 United States Code Section 2705 establishes the standard to delay notice for an 
initial period of up to 90 days. Records or other information pertaining to a subscriber to or 
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customer of such services, including basic subscriber information can be obtained with a 
search warrant or an 18 U.S.C. § 2703(d) order without notice. 


` D. (U) Basic subscriber information, as -described in 18 U.S.C. § 2703(c)(2), can be compelled 
by a grand jury or administrative subpoena without notice. 


E. (U) Preservation of Stored Data: The government is authorized under 18 U.S.C. § 2703(f) 
to direct a provider to preserve records or other information (stored records or . $ 
communications) in its posseśsion for. 90.days (which may-be extended for an additional 90- 
days) pending issuance of applicable legal process for disclosure. To make a preservation 
request, the FB] must believe that the records will subsequently be sought by appropriate 
legal process. 


F. (U) Cost reimbursement: Title 18 United States Code Section 2706 requires the 
government to reimburse for costs incurred in providing the contents of communications, 
records, or other information obtained under 18 U.S.C. §§ 2702, 2703, or 2704, except that 
reimbursement is not required for records or other information maintained by a 
communications common carrier that relate to telephone toll records and telephone listings 
obtained under 18 U.S.C. § 2703. In essence, the government does not have to reimburse for 
the cost of producing records that the provider maintains in the ordinary course of its 
business.. ; 


11.10.2, (U) Legal Authority 
(U) 18 U.S.C. §§ 2701-2712 
. (U) AGG-Dom, Part V.9 i : 
(U) ECPA—18 U.S.C. §§ 2701-2712— creates statutory privacy rights for the contents of 


communications in “electronic-storage” and records.or other information pértaining to a 
subscriber to or customer of an “electronic communication service” and a “remote computing 
service.” The statutory protections Protect the-privacy of an individual’s electronic data 
contained in a networked account—that may otherwise fall outside the scope of the protections 
afforded by the Fourth Amendment—when such account or its service is owned or managed by a 
third-party provider. i : 





(U) ECPA generally: (i) prohibits. access to the contents of wire or electronic communications 
while in “electronic storage” unless authorized (18 U.S.C. § 2701); (ii) prohibits a provider of 
service to the public from disclosing the contents of wire or-electronic communications while 
-held in “electronic storage,” and divulging to the government any information pertaining to a 
subscriber to or customer of such service unless authorized (18 U.S.C.. § 2702); and (iii) 
authorizes the government to compel disclosure from a provider of stored contents of a wire or 


customer (18 U.S.C. § 2703). ECPA provides for teimbursement of costs incurred in providing : 
the information acquired. ; 

11.10.3. (U) Definition of Investigative Method 

A. (U) Definitions: 

” (U) Electronic Storage: is "any temporary, intermediate storage of a wire or electronic 


communication incidental to the electronic transmission thereof,” or “any storage of such 
communication by an electronic communication service for purposes of backup protection of 
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such communication." 18-U.S.C. § 2510(17). In short, “electronic storage" refers only to 
temporary storage, made in the course of transmission, by a provider of an electronic 
communication service. 


(U) Remote Computing Service (RCS): is the “provision to the public of computer storage 
or processing services by means of an electronic communications system.” 18 U.S.C. 

§ 2711(2). In essence, a remote computing service is an off-site computer that stores or 
processes data for a customer. 


(U) Electronic Communications System: is "any wire, radio, electromagnetic; photooptical 
or photoelectronic facilities for the transmission of wire or electronic. communications, and 
any computer facilities or related electronic equipment for the electronic storage of such 
communications." 18 U.S.C, § 2510(14), 


(U) Electronic Communication Service (ECS): is "any service that provides to users 
thereof the ability to send or receive wire or electronic communications." 18 U.S.C. 

§ 2510(15). For example, telephone companies and electronic mail companies generally act 
as providers of electronic communication services. 


(U) ECPA authorities can be divided into two categories: (i) compelled disclosure—legal 
process to compel providers to disclose.the contents: of stored wire or.electfonic.. 
communications (including e-mail and voice mail—opened and unopened) and other 
information such as account records and basic.subscriber information; and (ii) voluntary 


disclosure of such information from service providers. Each of these authorities is discussed 
‘below. i 


B. (U) Compelled Disclosure: 


I. (U) Title.18 United States Code Section 2703 lists five types of legal process that the 
government can use to compel a provider to disclose certain kinds of information. The 
five mechanisms, in descending order of required threshold showing are as follows: 


e (U) Search warrant; 
. © (U) 18 U.S.C. § 2703(d) court order with prior notice to the subscriber or customer; 


e (U) 18 U.S.C. § 2703(d) court order without prior notice to the subscriber or 
customer; - 


© (U) Subpoena with prior notice to the subscriber or customer; and 


e (U) Subpoena without prior notice to the subscriber or customer 
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2. (U/FOUO) Notice—Orders Not to Disclose the Existence of a Warrant, Subpoena, 
or Court Order: FBI employees may obtain a court order directing network service 
providers not to disclose the existence of compelled process if the government has no 
legal duty to notify the customer or subscriber of the process. If an 18 U.S.C. § 2703(d) . 
order or 18 U.S.C. § 2703(a) warrant is being used, a request for a non-disclosure order 
can be included in the application and proposed order or warrant. If a subpoena is being 
used to obtain the information, a separate application to a court for a non-disclosure 
order must be made. 


3. (U) Legal Standard: A court may order an electronic communications service provider 
or remote computing service not to disclose the existence of-a warrant, subpoena, or 
court order for such period as the court deems appropriate. The court must enter such 
an order if it determines that there is reason to believe that notification of the existence 
of the warrant, subpoena, or court order will result in: 


' e (U) Endangering the life or physical safety of an individual; 
¢ (U) Flight from prosecution; 
e (U) Destruction of or tampering with evidence; 
e (VU) Intimidation of potential witnesses; or 


e (U) Otherwise seriously jeopardizing an' investigation or unduly delaying a trial. 18 
U.S.C. § 2705(b). 


4. (U) Search Warrant: Investigators can obtain the full contents of a network account 
with a search warrant. ECPA does not require the government to notify the customer or 
subscriber when it obtains information from a provider using a search warrant. 
Warrants issued under 18 U.S.C. § 2703 must comply with either FRCP Rule 4] or an 
equivalent state warrant, However, all warrants issued pursuant to 18 U.S.C. § 2703 do 
not require personal service; those warrants issued by a federal-court have nationwide 
jurisdiction (see below); and the warrants may only be served on an electronic 
communication service or a remote computing service. FRCP Rule 41 also poses the 
additional requirement on these warrants that a copy of the warrant be left with the 
provider, and a return and inventory be made. 


(U) Under 18 U.S.C. § 2703(a), with a search warrant issued based on probable cause 
pursuant to FROP Rule 41 or an equivalent state warrant, the government may obtain: 


a. (U) "The contents of a wire or electronic communication, that is in electronic 


storage in an electronic communications system for one hundred and eighty days 
or less," and d 


b. (U)-Everything that can be obtained using a 18 U.S.C. § 2703(d) court order with 
notice. i 


(U) In other words, every record and all of the stored contents ofan account—including 
opened and unopened €-mail/voice mail— can be compelled by a search warrant based 
_ on probable cause pursuant to FRCP Rule 41. Moreover, because the warrant is issued 
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by a neutral magistrate based on probable cause, obtaining a search warrant effectively 
insulates the process from:challenge under the Fourth Amendment, 


(U) Nationwide.Scope: Search warrants under 18 U.S.C. § 2703(a) may be issued by a 
federal "court with jurisdiction over the offense under-investigation," and may-be 
executed outside the district of the issuing court for miaterial responsive.to the warrant. 
State courts may also issue warrants under 18 U.S:C. § 2703(a), but the statute does not 
give these warrants effect outside the issuing court’s territorial jurisdiction. As with a 
typical FRCP Rule 41 warrant, investigators must draft an affidavit and a proposed 
warrant that complies with FRCP Rule 41. 


(U) Service-of Process: Title 18 United States Code Section 2703(a) search warrants 
are obtained just like any other FRCP Rule 41 search warrant but are typically served 
on the provider and compel the provider to find and produce the information described 
in the warrant. ECPA expressly states that the presence of an officer is not required for 
service or execution of a search warrant issued pursuant to 18'U.S.C. §2703(a). 


- (U) Court Order with Prior Notice to the Subscriber or Customer: Investigators 
can obtain everything in-a network account except for unopened e-mail or voice-mail 
stored with a provider for 180 days or less using a 18 U.S.C. §2703(d) court order with: 
prior notice to the subscriber unless they have obtained authority for delayed notice 
pursuant to 18 U:S.C. § 2705. ECPA distinguishes between the contents of 
communications that are in "Electronic storage" (e.g., unopened e-mail) for less than 
180 days, and those that-have been in "Electronic storage" for longer or that are no 
longer in "Electronic storage" (e.g., opened e-mail). 


(U) FBI.employees who obtain a coùrt order under 18 U.S.C. § 27030); and either give 
prior notice to the subscriber or comply with the delayed notice provisions of 18 U.S.C. 
§ 2705(a), may obtain: 


a. (U) “The contents of a wire or electronic communication that has been in 
electronic storage in an electronic communications system for more than one 
hundred and eighty days.” 18 U.S.C. § 2703(a). 


b. (U) "The contents of any wire or electronic cornmunication" held by a provider of 
remote computing.service "on behalf of . . . a subscriber or customer of such 
remote computing service," 18.U.S.C. §§ 2703(b)(1)(B)(ii), 2703 (b)(2); and 


c. (U) everything that can be obtained using a 18-U.S.C. § PARRE) court order 
without notice. 


b2. 
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(U) Legal Standard: To order delayed notice, the court must find that "there is reason 
to believe that notification of the existence of the court order may. . endanger[] the 
life or physical safety of an individual; [lead to] flight from prosecution; [lead to] 
destruction of or tampering with evidence; [lead to] intimidation of potential witnesses; 
or... otherwise seriously jeopardiz{e]‘an investigation-or unduly delay[ ] a:trial." 18 
U.S.C.-§§ 2705(a)(1)(A) and 2705(a)(2). The applicant must satisfy this standard anew 
each timé an extension of the delayed notice is sought. 


(U) Nationwide Scope: Federal court orders under 18 U.S.C. § 2703(d) have effect 
outside the district of the issuing court. Title 18 United States Code Section 2703(d) 
orders may compel providers to disclose information even if the information is stored 
outside-the district of the issuing court. See 18 U.S.C. § 2703(d) ("any court that.is a 
court of competent jurisdiction" may issue a 18 U.S.C. § 2703[d] order); 18 U.S.C. 

§ 2711(3) (court of competent jurisdiction- includes any federal court having jurisdiction 
over the offense being investigated without geographic limitation). 

(U) Title 18 United States Code Section 2703(d) orders may also be isstied by state ` 
courts. See 18 U.S.C. §§ 2711(3); 3127(2)(B). Title 18 United States Code Section 
2703(d) orders issued by state courts, however, do not have effect outside the ~ 
jurisdiction of the issuing state. See 18 U.S.C. §§ 2711(3): ; 


. (U) Court Order without Prior Notice to the Subscriber or Customer: FBI 
employees need-an 18 U.S.C. § 2703(d) court order to obtain most account logs and 
‘most transactional records. 


(U) A court order under 18 U.S.C..§ 2703(d) may. compel disclosure of: 


a. (U) All "record(s) or other information pertaining to a subscriber to or customer 
of such service (not including the contents of communications [held by providers 
of electronic communications service and remote computing service])," and 


b. (U) Basic subscriber information that can be obtained using a subpoena without 
notice. 18 U.S.C. § 2703(c)(1): 


(U) Types of Transactional-Records: The broad category of transactional records 


includes all records held by a service provider that pertain fo the subscriber beyond the. be 
specific records listed in 2703(0)(If O O b7E © 
fe ae we ee i 


UFOO es U U ůúġOò 
b2 
“b7E 
c. (U) Cell site.and Sector information: Cell site and sector information is 
considered “a record or other information pertaining to a subscriber” and 
therefore, production of historical and prospective cell site and sector information 


may be compelled by a court order under 18 U.S.C. § 2703(d). Requests made 
pursuant to 18 U.S.C. § 2703(d) ‘for disclosure of prospective cell site and sector 
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information—which is delivered to law enforcement under Communications 

Assistance for Law Enforcement Act (CALEA) at the beginning and end of 

calls— must be combined with an application for pen register/trap and trace 

dèvice. Some judicial districts will require a showing of probable cause before 
_ authorizing the disclosure of prospective cell site and sector information. 
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(U) Legal Standard: A court order under 18 U.S.C. § 2703(d) is known as an 
“articulable facts" court order or simply a "d" order. “This section imposes an 
intermediate standard to protect on-line transactional records. It is a standard higher 
than a subpoena, but not a probable cause warrant. The intent of raising the standard for 
access to transactional data is to guard against "fishing expeditions" by law 
enforcement.” (See H.R. Rep. No. 102-827, at 31 (1994), reptinted i in 1994 
U.S.C.C.A.N. 3489.) 


(U) The FBI must state sufficient specific and'articulable facts for thẹ`courtto find that 

there are reasonable grounds to believe that the contents of a wire or electronic 

communication, or the-records or other information sought, are relevant and material to 

an ongoing criminal investigation) = ln 

, b7E 





7. (U) Subpoena with Prior Notice to the Subscriber or Customer: Investigators can 
subpoena.openėd e-mail from a provider if they either give prior notice to the i 
subscriber or comply with the delayed notice provisions of 18 U.S.C. § 2705(a}—which 
requires a written certification by the SAC or ASAC that'there is reason to-believe-that 
notification of the existence of the subpoena may have an adverse result. 


(U) FBI employees who obtain a subpoena and either give prior notice to the subscriber 
or comply with the delayed notice provisions of 18 U.S.C. § 2705(a),-may obtain: 


a. (U) "The contents of any wire or electronic communication" held by a provider of 
remote computing service'"on behalf of... a subscriber or’customer of such 
remote computing service." 18 U.S.C. § 2703(b)(1)(B)(i), § 2703(b)(2); 


b. (U) "The contents of a wire or electronic communication that has been in 
electronic storage in an electronic communications-system for more than one 
hundred and eighty days." 18 U.S.C. § 2703(a); and 


c. (U) Basic subscriber information listed.in 18 U.S.C. § 2703(c)(2). 
b2 
b7E 
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(U) Legal standards for delaying notice. The supervisory official must certify in 
writing that "there.is reason to believe that notification of the existence of the court 
order may . . . endanger[] the life or physical safety of an individual; [lead to] flight 
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from prosecution; [lead to] destruction of or tampering with evidence; [lead to] 
intimidation of potential] witnesses; or . . . otherwise seriously jeopardizfe] an 
investigation or unduly delay[] a trial." 18 U.S.C. §§ 2705(a)(1)(A), 2705(a)(2). 
Importantly, this standard must be satisfied anew every time an extension of the 
delayed notice is sought. 


. (U) Subpoena without Prior Notice to the Subscriber or Customer: Investigators 
can subpoena basic subscriber information listed in 18 U.S.C. §2703(c)(2). 


(U) The government may use an administrative subpoena authorized by a federal or 
state statute or a federal or state grand jury or trial subpoena to compél a provider to 
disclose basic subscriber information listed in 18 U.S.C. § 2703(c)(2): “name; address;. 
local and long distance telephone connection records, or records of session times and ` 
durations; length of service (including start date)-and types of service used; telephone‘ 
or instrument number or other subscriber number or identity,. including any temporarily 
assigned network address; and means and source of payment for such service 
(including any credit card’or bank account number)[.]” _ 


(U 


b2 
b76 


See PATRIOT Act § 210, 115 Stat. 272, 283 (2001). 


(U) Legal Standard: The legal threshold for issuing a subpoena is low. In United 
States v. Morton Salt Co., 338 U.S. 632, 642-43-(1950), the Court articulated the 
deferential standard for judicial review of administrative enforcement actions is a four- 
factor evaluation of "good faith" issuance requiring that: (i) the investigation is 
conducted pursuant to a legitimate purpose; (ii) the information requested under the 
subpoena is relevant to that purpose; (iii) the agency does not already have the 
information it is seeking with.the subpoena; and (iv) the agency has followed the 
necessary administrative steps in issuing the subpoena. 


(U//FOUO) In the event that a federal grand jury subpoena is used, however, 
appropriate protections against.disclosure.must be followed in compliance with FRCP 


b2 
b7E 


Where the 
telephone billing records being sought are those of a member of the news media, 
approval of the Attorney General is required..(See DIOG Section 11.9.1.E) 
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b2 
b7E 


l. (U) Service NOT Available to the Public: Providers of services not available "to the 
public” are not prohibited from disclosure under ECPA, and so the provider may freely 
disclose both contents and other records relating to stored communications. Andersen 
Consulting v. UOP, 991 F. Supp. 1041 (N.D. Ill. 1998) (giving hired consulting firm 
employees access to UOP's e-mail system is not equivalent to providing e-mail to the 
public). Only providers of services to the public are prohibited from disclosing stored 
‘contents and records, unless statutorily authorized. 


. (U) Services That ARE Available to the Public: If the services offered by the 
provider are available to the public, then ECPA precludes both the disclosure of 
contents to any third party, including the government, and the disclosure of other 
records to any governmental entity unless a statutory. exception applies. The statutory 
exceptions permit disclosure by. a provider to the public, in essence when the-needs of 
public safety and service providers outweigh privacy interests. 


(U) If the provider is authorized to disclose the information to the government undef 18 
U.S.C. § 2702 and is willing to do so voluntarily, law enforcement does not need to 
obtain a legal order to compel the disclosure. 


(U) If a provider voluntarily discloses under the statute, there is-no follow-up legal 
process required or available. If the provider,-on the other hand, either may not or will 
not disclose the information; FBI employees must rely on compelled disclosure 
provisions and obtain the appropriate legal orders. 


i. (U) Voluntary disclosure of Stored Contents , 
(U) ECPA authorizes the voluntary disclosure of stored contents when: 


(a) (U) The disclosure is with the consent (express or implied) of the originator, 
addressee, intended recipient, or the subscriber in the case of opened e-mail, 
18 U.S:C. § 2702(b)(3); 


(b) (U) The disclosure "may be necessarily incident to the rendition of-the service 
or to the protection of the rights or property of the provider of that service," 18 
U.S.C. § 2702(b)(5); 


(c) (U) The provider "in good faith, believes that an emergency involving danger 
of death or serious physical injuty to any person requires disclosure without 
delay of information relating to the emergency,” 18:U.S.C. § 2702(b)(8); 


(d) (U) To the National Center for Missing and Exploited Children, in connection 
with a report submitted thereto under Section 227 of the Victims of Child 
Abuse Act of 1990. (42 U.S.C. § 13032 and 18 U.S.C. § 2702[b][6]); or 


(e) (U) The contents are inadvertently obtained by the service provider and 
appear to pertain to the commission of a crime. Such disclosures can only-be 
made to a law enforcement agency. 18 U.S. C. § 2702(b)(7) 
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ii. (U) Voluntary disclosure of Non-content Customer Records 


(U) ECPA provides for the voluntary disclosure of non-content customer 
records by a provider to a governmental entity when: 


- (a) (U) The disclosure -is with the consent (express or implied) of the customer or 
subscriber or 18 U.S.C: § 2702(c)(2) ; 


(b) (U) The disclosure "may be necessarily incident to the rendition of the service 
or to the protection of the rights or property of the provider ofthat service,” 18 
U.S.C. § 2702(c)(3); 


(c) (U) The provider "in good faith, believes that an emergèncy involving danger 
of death or serious physical injury to any person requires disclosure without 
delay of information relating to the emergency,” 18 U.S.C. § 2702(c)(4); or 


(U//FOUO) Note: an emergency disclosure under this statutory. exception is 
justified when the circumstances demand immediate action on thé part of the 
government to prevent death or serious bodily injury, and does not depend on 
the immediacy of the risk of danger itself. For example, an e-mail that 
discusses a planned terrorist attack but not-the timing for the attack would 
constitute an emergéncy that threatens life or limb, even though the timing of 
the attack is unknown. It is the need for immediate action to prevent the 
serious harm threatened.by-these circumstances rather than the immediacy of 
the threat itself that is the reason Congress authorized voluntary: disclosures 
under this exception. H.Rpt. No. 107-497 p 13-14 (June 11, 2002) 
accompanying H.R. 3482, The Cyber Security Enhancement Act of 2002, 
which passed as part of the comprehensive Homeland Security Act, See P.L. 
107-296 § 225. 


(d) (U) To the National Center for Missing and Exploited Children, in connection 
with a report submitted thereto under Section 227 of the Victims of Child 
Abuse Act of 1990. (42 U.S.C. § 13032 and 18 U.S.C. § 2702[c][5]) 


iii. (U) Preservation of Evidence under 18 U.S.C. § 2703(f): 






b2 
bTE 
(U) A governmental entity is authorized to direct providers to preserve stored 
records-and communications pursuant to 18 U.S.C. § 2703 
b2 
b7E 


Once a preservation request is made, ECPA 
requires that the provider must retain the records for 90 days, renewable for 
another 90-day period upon a government request. See 18 U.S.C. § 2703 (f\(2). 


(U) Specifically, 18 U.S.C. § 2703(f)(1) states: 


(a) (U) A provider of wire or electronic communication service or a remote 
computing service, upon the request of a governmental entity, must take all 
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necessary steps to preserve records and other evidence in its possession 
pending the issuance of a court order or other process. - 


(b) (U) There is no legally prescribed format for 18 U.S.C. § 2703 










(U) FBI employees who send 18 U.S.C. § 2703(f) letters to network service 
providers should be aware of two limitations. First, the authority to direct f 
providers to preserve records and other evidence is not prospective. That is, 18 
U.S.C. § 2703(£) letters can order a provider to preserve records that have 
already been created but cannot order providers to preserve records riot yet 
made. If FBI employeés want providers to record information about future 
electronic communications, they must comply with the electronic surveillance 
statutes. A second limitation of 18 U.S.C. § 2703(f) is that some providers 

may be unable to comply effectively with 18 U.S.C. § 2703(f) requests 







b2 
b7E 


iv. (Ù) Video Tape Rental or Sales Records 


(U) Title 18 United States Code Section’2710 makes.the unauthorized 
disclosure of records by any person engaged in the rental, sale, or delivery of 
prerecorded video cassette tapes or similar audiovisual materials unlawful and 
provides an exclusionary rule to prohibit personally identifiable information ” 
otherwise obtained from being admissible as evidence in any court’ proceeding. 
Personally identifiable.information is defined as "information that identifies a 
person.as having requested or obtained specific video material or services... ." 


(a) (U) The disclosure to law enforcement of “personally identifiable 
information” is permitted only when the law enforcement agency: 


(1) (U) Has the written consént of the customer; 


(2) (U) Obtains a warrant issued under the FRCP or equivalent state warrant; 
‘or’ ; : 


(3) (U) A grand jury subpoena; 






b2 


(b b7E 


(U):This type of information was specifically not included in the definition of 
"personally identifiable information" to allow law enforcement to obtain 
information about individuals during routine investigations such as 

` neighborhood investigations. 
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(U/FOUO) The disclosure of “personally identifiable information” ina 
national security case may be compelled through use of the above legal 
processes or pursuant to a business records order issued under 50 U.S.C. 
§ 1861. 


11.10.4. (U) Approval Requirements for Invéstigative Method 
A. (U) Voluntary Emergency Disclosure 


(U//FOUO) ECPA protects subscriber and transactional information regarding: 
communications from disclosure by providers of telephone or other electronic 
communication services. Generally, an NSL, grand jury subpoena, or other form of legal 
process must be used to compel the communication service provider to disclose such 


information 


(U//FOUQ) 5 
- þb7E 


b2 
b78 












(U//FOUO 
b2 
b7E 
(U//FOUO) 
b2 


b7E 


- 11.10.5. (U) Duration of Approval 


(U) As authorized by statute (e.g., for as long as the emergency. necessitating usage exists and 
only in those circumstances when it is impracticable to obtain legal process) and applicable court 
order or warrant. 


11.10.6. (U//FOUO) Specific Procedures 


A. (U//FOUO) Filings requirements: ae 
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b2 
b7E 


B] (U//FOUO) Contact with Providers: 
b2 
b7E 


C. (U) Cost Reimbursement: p 
(U) Policy and procedures regarding cost reimbursement are described in the following: 


(U) Consistent payment procedures i b2 


(U) 5/25/2005 Cost Reimbursement Guidance (18 U.S.C. § 2706 - ECPA) 
11.10.7. (UV) Notice and Reporting Requirements , 
A. (U) Voluntary disclosures: Title 18 United States Code Section 2702(d)-requires the 
Attorney General to report annually to ‘Congress information pertaining to the receipt of 


voluntary disclosures of the contents of stored wire or electronic communications in an 
a under 18 U.S.C. §'2702(b)(8), specifically: - : 


. (U).The number of accounts from which DOJ received.voluntary disclosures under 
subsection (b)(8); and 


2. (U) Summary of the basis for disclosure-in those instances where the investigation 
pertaining to those disclosures was closed without the filing of criminal charges. 


B. (U)-Roles/Responsibilities: OGC/ILB is assigned the administrative responsibility to, by 
December 3) of each year: 





I. (U) Tabulate the number of voluntary disclosures of stored contents received under the 
authority of 18 U.S.C. § 2702(b)(8) for the calendar year; 


_ 2, (U) Prepare the report summarizing the basis for disclosure in those instances where the 


investigation. pertaining to those disclosures was closed without the filing of criminal 
charges; and 


3. (U) Submit the report to OGC for review-and submission to DOJ according to the 
statutory requirement for annual report by the Attorney General. 


11.10.8. (U) Other Applicable Policie b2 


b7E 
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11.11. (U) Investigative Method: Pen Registers and Trap and Trace devices in conformity 
with chapter 206 of Title 18, United States Code, and the Foreign Intelligence 
Surveillance Act i 


11.11.1. (U) Summary 


(U) Pen register and ‘trap and trace (PR/TT) devices enable the prospective collection of non- 
content traffic information associated with wire and electronic communications, such as: the 
phone numbers dialed from or to a particular telephone, including electronic communications; 
Messages sent from or to a particular telephone; or the Internet provider (IP) address of 
communications on the Internet and other computer networks. 


(U//FOUO) Application: The PR/TT may be used in preliminary and full national security and 
criminal investigations. This method may not-be used for: (i) targeting a United States person 
when providing assistance to other agencies, unless there is already an open FBI preliminary or 

i quest for assistance or the predicate exists to open a preliminary 
or full investigation; (ii) targeting a United States person when collecting against a foreign 
intelligence requirement; or (iii) during an assessrnent. ` 


11.11.2. (U) Legal Authority 


(U) 18 U.S.C. §§ 3121-et seq. and 50 U.S.C. §§ 1842 et'seq, regulate the use of PR/TT devices. 
PR/TT orders can collect IP addresses, port numbers and the. “To” and “From” information from 
e-mail; they cannot intercept the content of a communication, such.as words.in the “subject line” 
or the body of an e-mail. : 


11.11.3. (U) Definition of Investigative Method 


(U) A pen register device records or decodes dialing, routing addressing or signaling information 
transmitted by an instrument or facility from which a wire or électronic communication is 


transmitted, provided that-such information must not include the contents of any communication. 
18 U.S.C. § 3127(3). . 


(U) A trap and trace device captures the incoming electronic.or other impulses that identify the 
originating number or other dialing, routing, addressing or signaling information reasonably 
likely to identify the source of a wire or electronic communication, provided that such i 
information does not include the contents of any communication. 18 U.S.C. § 3 127(4). 


11.11.4. (U) Standards for Use and Approval Requirements for Investigative Method 


A. (U) Pen Register/Trap and Trace under FISA: Applications for authority to use a PR/TT 
devicé can be made to the FISC in national security investigations, . 


1. (U) Legal Standard: Applications to the FISC are to be under oath and must include: 
a. (U) The identity of the federal officer making the application; and 


b. (U)A certification by the applicant that the information likely'to be obtained is 
foreign intelligence information not concerning a United States person or, if 
concerning a United States person, is information that is relevant to an ongoing 
investigation to protect the United States against international terrorism or 
clandestine intelligence. activities; and that such investigation, if of a United States 
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person, is not conducted solely upon the basis of activities protected by the First 
Amendment to the Constitution. 


2. (U//FOUO) Procedures: Requests for initiation or renewal of FISA PR/TT must be made 


FISAMS w 
route the request to appropriate parties for their review and approval of the request = 
: Routing a paper copy for 
signatures Is not required. 


> (U) Emergency Authority—FISA: 50 U.S.C. § 1843 


(U//FOUO) Under the provisions of FISA, the Attorney General may grant Emergency 
Authority (EA) for PR/TT. Requests for Emergency Authority must be referred to the 
appropriate FBIHQ Division. es 


a. (U) The Attorney General may authorize the installation and use of a PR/TT upon 
a determination that an.emergency exists and that the factual basis exists for a 
court order. The FISC must be informed at the time of the authorization and an 
application for a court order must be made to the court no more than seven (7) 
days after the authorization. Emergéncy-authorized PR/TT use must terminate 
when the information sought is obtained, when the FISC denies the application, or 
seven (7) days after the Attorney General authorization is given. 


. (U) If the FISC denies the application after an emergency PR/TT device has been 
installed, no information collected as.a result may be used in any manner, except 
with the approval of the Attorney General upon a showing that the information 
indicates a threat of death or serious bodily harm to any person. 


(U) Notwithstanding the foregoing, the President, acting through the Attorney 
General, may authorize the use of a PR/TT, without a court order, for a period not to 
exceed 15 calendar days, following a declaration of war by Congress. 


U/FOQUOC 


at any time during an 
emergency. i 


B. (U) Criminal Pen Register/Trap and Trace under 18 U.S.C. §§ 3121 et seq.: Applications 
for-the installation and use of a PR/TT device may be made to a “court of competent 
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jurisdiction”—i.e., “any district court of thë United States (including a magistrate judge of 
such a court) or any United States court of appeals having jurisdiction over the offense being 
investigated, or any court of general criminal jurisdiction of a State authorized by the law of 
that State to enter orders authorizing the use of a pen register or trap and trace device.” 18 
U.S.C. § 3127(2). 


1. (U) Legal Standard: Applications for authorization to install and use a PR/TT device 
must include: i 


a. (U) The identity of the attorney for the government or the state law enforcement 
-or investigative officer making the application and the identity. of the law 
enforcement agency conducting the investigation; and 


b. (U)A certification by the applicant that the information likely to be obtained is 
relevant to-an ongoing criminal investigation being conducted by that agency. 


‘2. (U//FOUO) Procedures: An SSA must approve a request for initiation or renewal of 
PR/TT use prior to submission of the request to an-attorney. for the government..Before 
approving such a request, the SSA should consider of the following: 


a. (U//FOUO) The.use of resources based:on the-investigative purpose set forth; 


b. (U//FOUO) Whether there is sufficient factual basis for the certification to be 
‘made in the application (i.e., is the information likely to be obtained relevant to an 
ongoing criminal investigation); 


c. (U//FOUO) Whether the customer or subscriber has consented to the use of a 
PR/TT, see 18 U.S.C. § 3121(6)(3); or $ 


d. (U//FOUO) Whether the use of a PR/TT is the least intrusivé method feasible 
under the circumstances. 


(U//FOUO).A: copy of the approving EC must be maintained in the investigative case file 
and/or sub file and in the ELSUR Administrative Subfile to the corresponding case file. 


(U//FOUO) A PR/TT order is executable anywhere within the United States and, upon 
service, the order applies to any person or entity providing wire-or electronic 
communication service in the United States.whose assistance may facilitate the execution 
of the order. Whenever such an order is served on any person or entity not specifically 
named in the order, upon request of such person or entity, the attorney forthe 
government or law enforcement or investigative officer that is serving the order must 


provide written or electronic certification that the order applies to the person or entity 
i s . 
being served. 


3. (U) Emergency Authority—Criminal: 


(U) The Attorney General, the Deputy Attorney General, the Associate Attorney General, 
any Assistant Attorney General, any acting Assistant Attorney General, or any Deputy 
Assistant Attorney General may specially designate any investigative or law enforcement 
officer to determine whether an emergency situation that requires the installation and use 
ofa PR/TT device before an order authorizing such installation and use.can, with due 
diligence, be obtained. £ T 


(U) An emergency situation as defined in this section involves: 
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a. (U) Immediate danger of death or serious bodily injury. to any person; 

‘b. (U) Conspiratorial activities characteristic of organized crime; 

c. (U) An immediate threat to a national security interest; or ; 

d. (U) An ongoing attack on a protected computer (as defined in 18 U.S.C. § 1030) 


that constitutes a crime punishable by a term of imprisonment greater than one 
year. i 


(U) If the DOJ authorizes the emergency installation of a PR/TT, the government has 48 
hours after the installation to apply for a court order according to 18 U.S.C. § 3123. Itisa 
violation of law to fail to apply for a court order within this 48 hour period. Use of the 
PR/TT shall immediately terminate when the information sought is obtained, when the 
„application for a court order is denied, or if no court order has been obtained 48 hours 
after the installation of the PR/TT device. i 


b2. 
b7E 





Once that approval has, béen 
obtained, the DOJ attorney will advise the AUSA that the emergency use has been 
approved and that the law enforcement agency may proceed with the installation and use 
of the PR/TT. The DOJ attorney will send a verification memorandum, signed by the 
authorizing official, to the AUSA. The AUSA will include an authorization memorandum 
with the application for the court order approving the emergency use. 


//FQUO) If an emergenc situation arises after regular business hours 
b2 
During regular business hours |] b7E 


11.11.5. (U) Duration of Approval 


(Ù) National Security: The use ofa PR/TT device may-be authorized by the FISC for a period 
of time not to exceed 90 days in cases targeting a United States person. Extensions may be 
granted for periods not to exceed 90 days upon.re-application to the court. In cases targeting a 
non-United States-person, an order or extension may be for a period of time not to exceed one . 
year. ; 











under 18 U.S.C. § 3123 fot a period not to exceed sixty days, which may be extended for 
additional sixty-day periods. 


11.11.6. (U/FOUO) Specific Procedures 


A. (U//FQUO) Prior to installing and using a PR/TT device (whether issued in a criminal or 
national security matter), the case agent should: : 


(U) Criminal: The installation arid use of a PR/TT device may-be authorized by court order 





‘b2 
_ bTE 
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ass — b2 
3. (U/FOUO b7E 


4. (U/FOUO 








‘11.11.7. (U) Use and Dissemination of Informa 
Trace Authorized: Pursuant to FISA 


(U) 50 U.S.C. § 1845 


A. (U) No information acquired from.a PR/TT device installed and u 
be used or disclosed by federal officers or employees except for | 


(U) No information acquired pursuant to a FISA authorized PR/ 
enforcement purposes unless such disclosure is accompanied by a-statement that such 
information, or any information derived therefrom, may-only be used in a criminal 
proceeding with the advance authorization of the Attorney General. 


C. (U) Whenever the United Statés intends to enter into evidence or otherwise use or disclose in 
` any trial, hearing, or other proceeding in or before any court, department, officer, agency, 
regulatory body, or other authority of the United States against an aggrieved person.any 
information obtained or derived from the use of a PR/TT device acquired pursuant to FISA, 
the United States must, before the trial, hearing, or other proceeding or at a reasonable-time: 
before an effort to so disclose or so use that information or submit it into evidence, notify the 
aggrieved person, and the court or other authority in which the information.is to be disclosed 
or used, that the United States intends to so disclose or so use such information. 

(U) Note: 50 U.S.C. § 1801(k) defines aggrieved person as: “a person who is the target of an 
electronic surveillance or any other person whose communications or activities were subject 
to electronic surveillance.” 





tion Derived from Pen Register/Trap and 






sed pursuant to FISA may 
awful purposes. 






B. 






TT may be disclosed for law 
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11.11.8. (U) Notice and Reporting Requirements - 


A. (U) Annual Report for-Criminal Pen Register/Trap and Trace: The. Attorney General is 
required to make an annual report to Congress‘on the number of criminal PR/TT orders 
applied for by DOJ law enforcement agencies. 18 U.S.C. § 3126. The report is to include the 
following information: 


1. (U) The period of interceptions authorized by the order, and the number.arid duration of 
any extensions; 


(U) The offense specified in the order or application, or extension; 
(U) The riumber of investigations involved; 


U) The number-and nature of the facilities affected; and 


oR Po 


(U) The identity, including the district, of the applying agency making the application 
and the person authorizing the order. 


(U//FOUO) DOJ, Criminal-Division, Office of Enforcement Operations requires that the FBI 
provide quarterly reports on pen register usage. To satisfy DOJ data requirements and 
standardize and simplify field reporting, Court-ordered pen register usage must be reported to 
FBIHQ within five workdays of the. 
expiration date of an original order or extensions, or denial of an application for an order. For all 
criminal PR/TT orders or extensions issued on or after January 1, 2009 

These reporting requirements do not apply to P 
authorized pursuant to consent or under the provisions of FISA. 


B. (U) Semi-Annual Report for National Security Pen Registers and Trap and Trace: The 
Attorney General must inform the House Permanent Select Committee on Intelligence, 
Senate Select Committee on Intelligence, Committee of the Judiciary of the House 
Representatives, and Committee.of the Judiciary of the Senate concerning all uses of PR/TT 
devices pursuant to 50 U.S.C. § 1846. This report is coordinated through DOJ NSD. A semi- 

` annual report must be submitted that contains the following information: 


1. (U) The total number of applications made for orders approving the use of PR/TT devices; 


2. (U) The total number of such-orders either granted, modified,-or denied: and 


3. (U) The total number of PR/TT devices whose installation and use was authorized by the 
Attorney General on-an emergency basis and the total number of subsequent orders 
approving or denying the installation and use of such PR/TT devices. 


11.11.9. (U) Special Circumstances 


A. (U//FOUO) Avoiding Collection and Investigative Use of “Content” in the Operation of 
Pen Registers and Trap and Trace Devices 


- (U/FQUO) Overview: Telecommunication networks provide users the ability to engage 
in extended dialing and/or signaling; (also known as "post cut-through dialed digits" or 
PCTDD), which in some circumstances are simply call-routing information and, in others, 
are call content. For example, PCTDD occur when a party places a calling card, credit 
card, or collect call by first dialing a long-distance carrier access number and then, after 
the initial call is “cut through,” dials the telephone number of the’ destination party. In 
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other instances, PCTDD may represent call content, such as when a party calls an 
automated banking service and enters an account number, calls a pharmacy’s automated 
prescription refill service and enters prescription information, or enters a call-back 
number when.prompted by a voice mail service. See United States: Telecom A 


(U//FOUO) The definition of both a pen register device and a trap and trace device 
provides that the information collected by these devices "shall not include the contents of 
any communication." 18 U.S.C. § 3127. In addition, 18 U.S.C. § 3121(c) makes explicit . 
the requirement to "use technology reasonably available" that restricts the collection of 
information "so as not to include the contents of any wire or electronic communications." 
"Content" includes any information concerning the substance, purpose, or meaning of a 
communication. 18 U.S.C. § 2510(8). When the pen register definition is read in 
conjunction with the limitation provision, however, it suggests that although a PR/TT 
device may not be used for thé express purpose of collecting-content, the incidental 
collection of content may occur-despite the use of "reasonably available" technology to. 
minimize, to the extent feasible, any possible over collection of content while still 
allowing the device to collect all of the dialing and signaling information authorized. 


DOJ Policy: In addition to this statutory obligation, DOJ has issued a directive to all DOJ 
agencies requiring that no affirmative investigative use may be made of PCTDD 
‘incidentally collected that constitutes content, excépt in cases of emergency—to prevent 
an immediate danger of death, serious physical injury, or harm to the national security. 


(UIEQUO 


2. (U//FOUO) Collection: 
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3. (U//FOUO) Use of PCTDD: 








i. (U/FOUO 








iti, (U//FOUO 
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iv. (U/FOUO) 
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b. FOUO) 
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i. (U/FOUO 
b2 
b7E 





b2 
b7E 
o4 (UitEOUO) What constitutes PCTDD content: In applying the above, the term 
“content” is interpreted to mean-“any information concerning the substance, purpose, or 
meaning of a communication” as defined in 18 U.S.C. § 2510. Questions concerning 
whether specific PCTDD are content as opposed to dialing, routing or signaling 
information should be addressed to the CDC or OGC for coordination with DOJ as 
necessary. 
b2 
b7E 





B. (U//FOUO) Use of cell site simulators/digital analyzers/wireless intercept tracking 
technology. A PR/TT order or consent is required for the FBI to use equipment to capture 
any "signaling information"—including the Mobile Station Identification Number (MSIN) 
and Electronic Serial Number (ESN) or other registration-type data—emitted from a 
wireless phone into the public airspace—even though this can be accomplished without the 
assistance of the service. provider. Because 18 U.S.C. § 3127 defines PR/TT devices in 
terms of recording, decoding or capturing dialing, routing, addressing, or signaling 
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_ information, the government’s use of its own device to capture such signaling data— 
- whether passively monitoring or actively interrogating—constitutes the use of a "pen 
register" device and requires an order or statutory exception to avoid violating the statute. 
The following discusses how wireless intercept tracking technology (WITT) is used: 


1. (U//FOUO) To Locate a Known Phone: 


a. (U/[EQUO) Authority: A standard PR/TT order is adequate to authorize the use of 
this technology to determine the location of a known targeted phone,.provided that 
‘the language authorizes FBI employees to install or cause to be installed and use a 
pen register device, without geographical jimitation, at any time of day or night 
within (X) days from the date the order is signed, to record or decode dialing, 
routing, addressing, or signaling information transmitted by the “Subject 
Telephone.” The application and order should generally also request authority to 
compel disclosure. of cell site location data on an ongoing basis under 18 U.S.C. 

§ 2703(d)—or probable cause, if such is required by the particular district court—as- 
such information may.assist in determining the general location of the targeted 
phone. 


` 


Kyllo v. United States, 533 U.S. 27 (2001), the use of equipment not in 
general, public use to acquire data that is not otherwise. detectable that emanates 
om_anrivate premise implicates the Fourth Amendment. 
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2. (U/IFOUO) To Identify an Unknown Target Phone Number: 


a. (U//FOUO 


b, (U/FOUO) 
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C. (U) PR/TT Order Language: The language in the order Should state that "the pen register 


_ will be implemented unobtrusively and with minimum interference with the services 
accorded to customers of such service." 
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11.12. (U) Investigative Method; Electronic Surveillance under Title IH and under 
FISA . 


{1.12.1. (U) Summary 


(U//FOUO) Electronic Surveillance (ELSUR) is a valuable investigative method. It is, also, a 
very intrusive means of acquiring information relevant to the effective-execution of the FBP’s, 
law enforcement, national security and intelligence missions. To ensure that due consideration is 
given to the competing interests between law enforcement and the effect on privacy and civil 
liberties, this section contains various administrative and management controls beyond those 
imposed by statute and DOJ guidelines. Unless otherwise noted, it is the responsibility of the. 
case agent and his/her supervisor to ensure compliance with these instructions. ELSUR is only 
authorized’as an investigative method in the conduct of full investigations. ELSUR requires: (i) 

_ administrative or judicial authorization prior to its use; (ii) contact with the Field Office ELSUR 
Technician to coordinate all necessary recordkeeping; and (iii) consultation with-the Technical 
Advisor (TA) or a designated TTA to determine feasibility, applicability, and use of the ` 
appropriate equipment. = 

U//FOUO) Application: 








b2 
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11.12.2. (U) Legal Authority 


(U) ELSUR is authorized by chapter 119, 18 U.S.C. §§.2510-2522 (Title III of the Omnibus and 
Safe Streets Act of 1968); 50 U.S.C. §§ 1801-1811 (FISA); and E.0. 12333 § 2.5. 


11.12.3. (U) Definition of Investigative Method 


(U) ELSUR is.the non-consensual electronic collection of information (usually: communications) 


under circumstances in which the parties have a reasonable expectation of privacy and court 
orders or warrants.are required. 


y 


11.12.4. (U) Standards for Üse and Approval Requirements for Investigative Method 
A. ‘(U//FOUO) FISA 


1. (U/FOUO) FBIHQ and Field Office requests for'FISC ELSUR orders must use the 
FISA Request Form. Field Office requests for FISA orders are submitted and tracked 
through FISAMS. The FISA request forms, in a question and answer format, have been 
designed to ensure that all information néeded for the preparation of a FISC application 
is provided to FBIHQ and to the DOJ. 


2. (U) A Certification by the Director of the FBL-or one of nine other individuals 





authorized by Congress or the President to provide such certifications that the 
information being sought is foreign intelligence information; that a significant purpose 
of the electronic-surveillance is to obtain foreign intelligence information; that such 
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information cannot reasonably be obtained by normal investigative techniques; that the 
information sought ig "foreign intelligence information" as defined by. FISA; and 
includes a statement explaining the certifier's basis for the certification. 


(U) Note: Title 50 of the United States Code Section 1804 specifies the Assistant to the 


President for National Security Affairs: E.O. 12139 as amended by E.0, 13383 

specifies the Director of the FBI, Deputy Director of the FBI, the Director of National . 
. Intelligence, the Principal Deputy Director of National Intelligence, the Director of the i 

Central Intelligence Agency; the Secretary of State; the Deputy Secretary of State, the 


Secretary of Defense, and the Deputy Secretary of Defense as appropriate officials to 
make certifications required by FISA. 


3. (U) Emergency FISA Authority (50-U.S.C. § 1805[f]) 


(U) The Attorney General, on re 
may authorize an emergency FI 
determined that an emergency 
approval and that a factual pre 


quest from the Director.of the FBI or his/her designee, 
SA for electronic surveillance when it is reasonably 
Situation exists that precludés advance FISC review and 
dication for the issuance of a FISA Order exists. A FISC 
judge must be informed by DOJ at the time of the emergency authorization and-an 
application must be-submitted to that judge as soon as is practicable but not more than 


_ Seven (7) days after the emergency- authority has-been approved by the Attorney 
General. If a court order is d 


enied after an emergency surveillance has been initiated, 
no information gathered as a result of the surveillance may be used as evidence or 
disclosed in any trial or oth 


er proceeding, and no information concerning any United 


-States person acquired from such surveillance may be-used or disclosed in any manner, 


except with the approval of the Attorney General if the information indicates a threat.of 
death or serious bodily harm to any person. 


(U//FOUO) For an emerge 










ency FISA for electroni 


B. (U) Title IN 


(U//FOUO) An SAC (or designee) has the authority to approve requests for “non-sensitive” 
Title III orders. An Acting SAC may approve such requests in the absence of the SAC. The 


authority to approve Title III applications may not be delegated lower than the ASAC level. 
The SAC, with the recommendation of the CDC, must determine whether the request 
involves sensitive circumstances. 


(U//FOUO) Ifa Title II involves one of the seven “sensitive circumstances,” it must be 
approved by FBIHQ. 


(U//FOUO) The following five se 
Assistant Ditector (DAD) or hi 
Counterintelligence Division ( 

1. (U//FOUO) Significant 


client privilege or.other 
representatives); 


nsitive circumstances require the approval of a Deputy 
gher from the Criminal Investigative Division (CID), 
CD), or Counterterrorism Division (CTD), as appropriate: 


privilege issues.or First Amendment concerns (e.g., attorney- 
privileged’ conversations or interception of news media 
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2. (U/FOUC) Significant privacy.concerns (e.g., interceptions of conversations in a 
bedroom or bathroom); 


3. (U//FOUO) Applications based on “relaxed specificity” (i.e., “roving” interception) 
under 18 U.S.C, § 2518(11)(a) and (b); 


4. (U/IFOUO) Applications concerning Domestic Terrorism, Ipteeyons! Terrorism, or 
‘Espionage investigations; or 


5. (U//FOUO) Any situation deemed appropriate v the: AD of CID of OGC. 


(U//FOUO) The following two sensitive circumstances require the approval of the Director. 
the Acting Director, Deputy Director, or the EAD for the Criminal Cyber Response and 
Services Branch, or the EAD for the National Security Branch, or the respective Assistant 
Director for-Counterterrorism or Counterintelligence: 


> %. 


6. (U//FOUO) "Emergency” Title III interceptions (i.e., interceptions conducted prior to 
judicial approval under 18 U.S.C. § 2518[7}); or 


7. (U/(FOUO) The interception of communications of members of Sonica: federal 
judges, high-level federal.officials, high-level state executives, or members of a state 
judiciary or legislature is anticipated. | 


(U//FOUO) All requests for electronic surveillance that involve one of Ag above “sensitive 
circumstances” must be reviewed by the OGC prior to approval. 


(U//FOUO) With the prior approval of the Attorney General, or Attorney Generals designee, 
the United States Attorney or the Strike Force Attorney must apply to a federal judge for a 
court order authorizing the interception of communications relating to one or more of the 
offenses listed in Title HI (18 U.S.C. § 2516). Judicial oversight continues into the 
operational phase of the electronic surveillance—installation, monitoring, transcribing and 
‘handling of recording media. ` 


(U//FOUO) An extension order may be sought to continue monitoring beyond the initial 30- 
day period without a lapse in time. When a break in coverage has occurred, a renewal order 
may be sought to continue monitoring the Same interceptees or facilities identified in the 
original authorization. The affidavit and application in support of an extension or renewal ` 
must comply with all of the Title III requirements, including-approval of the Attorney 
General or designee. Except as explained below, extensions that occur within 30 days of the 
original Title III order do not require review by the SAC or designee. After a lapse of more 
than 30 days, the SAC-or designee must review and request renewed electronic surveillance. 


(U//FOUO) There may be situations or unusual circumstances that require the FBI to adopt 
an already existing Title III froin another federal law enforcement agency. This will be 
approved on a case-by-case basis, only in exceptional circumstances. 


(U//FOUO) Before the FBI begins or adopts the administration of a Title Ill, the Field Office 
must obtain SAC or designee approval. Thereafter, extensions and-renewals within 30 days 
do not require SAC or designee approval. 


(U//FOUO) Emergency Title Il interceptions (é.g., interceptions conducted prior to judicial 


approval under 18 U.S.C. § 2518{7]) — [Hyperlink to Memo dated May 22. 2008 Standard 
and Process Authorization] 
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may be reached 
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11.12.5, (U) Duration of Approval 
A. (U) FISA i 
(U/IF OUO) FISC orders for ELSUR surveillance are provided for the period of time 
specified in the order that will not exceed: 90-days for United States persons; 120 days for 
hon-United States persons; and.one year for a foreign power, as defined in 50 U.S.C. 
§ 1801(a) (1)(2) or (3). For United States persons, renewals of FISA Orders may be 
requested for the same period of.time originally authorized based upon.a continued showing 
‘of probable cause. For non-United States persons, renewals can be for a period not to exceed 
one year. All renewal requests should be submitted to DOJ NSD by. the requesting Field 
Office at least 45 days prior to the expiration of the existing order. These requests are to be 
submitted using the FISA Request Form process in FISAMS, 


B. (U) Title I 


(U) Title IH ELSUR orders arè for a period not to exceed 30'days, with subsequent 30 day 
extensions as authorized by the'coúrt. * ` 


11.12.6. (U) Specific Procedures oo 
A. (U) FISA : i b2 
: b7E 
(U//FOUO) 
1. (U/FQUO) FISA Verification of Accurac Procedures 


(U//FOUO b2 
b7E 
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i. (U/EQUO ~ = 
- = - = i b7E 
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a0 b2 

fl. b7E 
iii. (CU/FOUO 

5 
b7E 

b2 
b. (U//FOUO b7E 

2. (U//F OUO) FISA Electronic Sùrveillance Administrative Sub-file 
_. (U//EOUO b2 . 
b7E 





= - b2 
a.. (U//FOUO b7E 
b2 
b. (U//FOUO b7E 


3. (U/FOUO) FISA Review Board for FISA Renewals 
(U//FOUO) b2 
bTE 


a. (U//FOUO 
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B. (U) Title I 


l. (U//FOUO) The requirements in 18 U.S.C. § 2518 must be followed meticulously in the 
preparation of a Title III application. In addition, the following points must be covered: 


a. (UIF OUO) Probable cause must be current; 


b. (U/FOUO) There must be a factual basis for concluding that normal investigative 
Procedures have been tried and failed‘or a demonstration why these procedures 
appear to be unlikely to succeed or would be too dangerous if tried ("boilerplate" 
Statements in this respect are unacceptable); 


c. (U//FOUO) If the subscriber of the telephone on which coverage is sought is not 
- one of the principals, attempts to identify the subscriber.must be made; 


d. (U//FOUO) Minimization will be occur, as Statutorily required, if the coverage 
involves a public telephorie booth, a restaurant table, or the like; 


» _(U//FOUO) The facility or premises to be covered is' described full 













(U//FOUO) At least 10 days prior to submitting the Title III request to.DOJ OEO, 
the Field Office must forward an electronic communication to FBIHO 
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- bZ 
bTE 


3. (U//FOUO) For details on when, how, and where to conduct pre-Title IT ELSUR 
searches, refer to CID PG. 


4. (U//FOUO) Case ag 





b2 
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ents must use the 


OUO) For additional guidance, see ELSUR Manual. 
11.12.7. (U) Notice and Reporting: Requirements 
A. (U) FISA 


(U//EOUO b2 


b7E 


B. (U) Title HI 


1. (U//FOUO) The anticipated interception of conversations related to a “Sensitive 
Investigative Matter” as defined in the AGG-Dom, Part VILN, fequires-notice to the 
appropriate FBIHQ Unit Chief and Section Chief, and DOJ Criminal Division. 


p2 
b7E 


b2 
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c. (U/FOUO) b2 


b7E 
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5. (U//FOUO) Upon completion of a Title 11] ELSUR activity, the Form.2 report is 
required to be submitted per 18 U.S.C. § 2519. For details on the sompiensy and 
submission of the Form 2 report, see the CID PG.- 


11.12.8. (U) Compliance and Monitoring 

A. (U) FISA b2 
a a a 

B. (U) Title II 


(U//FOUO) Upon completion of Title III ELSUR activity, the Form 2 reportis required to be 
submitted per 18 U.S:C. § 2519. For details on the completion and submission of the Form 2 
report, see.the CID PG. 


UL. 12.9. (U) Special Circumstances 
(U) FISA 


(U) Under 50 U.S.C. § 1802, the President, through the Kine General, may authorize 
electronic surveillance under-FISA without a court order for periods of up to one year, if the 
Attorney General certifies in writing under oath that the surveillance will be. solely directed at 
acquiring communications that ace transmitted by means that are exclusively between or among 
foreign powers and. there is no substantial likelihood of the surveillance acquiring the contents of 
communications to which United States Persons.are parties. 


11.12.10. (U) Other Applicable Policies 
A. (U) FISA 
1. (U//FOUO) CD Policy Guide 
2. (U//FOUO) CTD Policy Guide 
3. (U//FOUO) Investigative Law Unit Library 


4. (U//FOUO) Foreign Intelligence Surveillance Act (FISA) Unit 
B. (U//FOUQO) OTD PG 


1. (U/FOUO) Title HI 

2. (U//FOUO) Memo dated May 22, 2008 Standard and Process Authorization 
3. (U/FOUO) ELSUR Manual 

4. (U//FOUQ) CID PG 

5. (U//FOUO) OTD PG 
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11.13. (U) Investigative Method: Physical searches, including mail openings, requiring 
judicial order or warrant 


(U) AGG-Dom, Part V.A.12. 
11.13.1. (U) Summary 


(U) The Fourth Amendment to the United States Constitution governs all searches and seizures 
by government agents. The Fourth Amendment contains two clauses. Thefirst establishes the 
prohibition against unreasonable searches and seizures. The second provides that no warrant 
(authorizing a search or seizure) will be issued unless based on probable cause. An unlawful 
search does not preclude a prosecution. The remedy to the defendant for an unlawful search is 
suppression of the evidence resulting from the illegal seizure. 








b2 
b7E 





‘(U) A search is a government invasion of a person’s privacy. To qualify as reasonable 
expectation of privacy, the individual must have an actual subjective expectation of privacy and’ 
society must be prepared.to recognize that expectation as objectively reasonable. See Katz v. 
‘United States, 389 U.S. at 361. The ability to conduct a physical search in an area or situation 
where an individual has a reasonable expectation of privacy requires a warrant.or order issued by 
a court of competent jurisdiction or an exception to the requirement for such a warrant or-order. 
The warrant or order must be based on probable cause. The United States Supreme Court defines 
probable cause to search as a “fair probability that contraband or evidence of a crime will be 
found in a particular place.” Illinois v. Gates, 462 U.S. 213, 238 (1983). A government agent 
may conduct a search without a warrant based on an individual’s voluntary consent. A search 
based on exigent circumstances may also be conducted without a warrant, but the requirement 
for probable cause remains. 


11.13.2. (U) Legal Authority 


(U) Searches conducted by the FBI must be in conformity with FRCP*Rule 41: FISA, 50U.S.C. . 
§§ 1821-1829; or E.0. 12333 § 2.5. 


.11.13.3. (U) Definition of Investigative Method . 


(U) A physical search constitutes.any physical-intrusion within the United States into premises or 
property (including examination of the interior of property by technical means) that is intended: 
to result in the seizure, reproduction, inspection,.or alteration of information, material,.or 
property, under circumstances in which a person has a reasonable expectation of privacy. 


(U) A physical search requiring a wartant does not include: (i) electronic surveillance as defined 
in FISA.or Title. II; or (ii) the acquisition by the United States Government of foréign 
intelligence information from international foreign communications, or foreign intelligence 
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activities conducted according to otherwise applicable federal law involving a foreign electronic 
communications systém, using a means other than electronic surveillance as defined in FISA. 






A. (U) Requirement for Reasonableness..By the terms of the Fourth Amendment, a search 
must be.reasonable.at its inception and reasonable in its execution 


B. (U) Reasonable Expectation of Privacy. The right of privacy is a personal right, not a 
property concept. It safeguards whatever an individual reasonably expects to be private. The 
protection-normally includes persons, residences, vehicles, other personal property, private 
conversations, private papers and records. The Supreme Court has determined that there is no 
reasonable expectation of privacy in certain areas or information. As a result, government 
intrusions into those areas do not constitute a search and, thus, donot have to meet the 
requirements of the Fourth Amendment. These areas include: (i) open fields; (ii) prison cells; 
(iii) public-access areas; and (iv) vehicle identification numbers. The Supreme Court has also 
determined that certain governmental practices do not involve an intrusion into a reasonable 
expectation of privacy and, therefore, do not amount to a:search. These practices include: 

(i) aerial surveillance conducted-from navigable airspace; (ii) ‘field test of suspected: 
controlled substance; and (iii) odor detection. A reasonable expectation of privacy iay’be 
terminated by an individual taking.steps to voluntarily relinquish the expectation of privacy, 
such as abandoning property or setting trash at the edge of the curtilage or beyond for 
collection. 





b2 
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C. (U) Issuance of search warrant 


1. (U) Under FRCP Rule 41, upon the request of a federal law enforcement officer or an ' 
attorney for the government, a search warrant may be issued by: 


S a. (U) a federal magistrate judge, or if-none is reasonably available, a judge of a 
state court of record within the-federal district, for a search of property or fora 
person within the. district; 


b. .(U) a federal magistrate judge for a search of property-or for a person either 
‘within or-outside the district if the property or person is within the district when 
the warrant is sought.but might move outside the district before the warrant is 
executed; i 


c. (U)a federal magistrate judge in any-district in which activities related to the 
terrorism may have occurred, for a search of property:or for a person within or 
outside the district, in an investigation of domestic terrorism of international 
terrorism (as defined in 18 U.S.C. § 2331);-and 


d. (U) a magistrate with authority in the district to issue.a warrant to install a 
tracking device. The warrant may authorize use of the device to track the 
* movement of a person or property located within the district, outside, or both. 


2. (U) Physical seaiches related to a national security purpose may be authorized by the 
FISC. (50 U.S.C. §§ 1821-1829) 
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D. (U) Property or Persons That May be Seized with a Warrant. 


(U) A warrant may be issued to search for and seize any: (i) property that constitutes 
evidence of the commission of a criminal offense; (ii) contraband, the fruits of crime, or 
things otherwise criminally possessed; or (ili) property designed or intended for use or that is 
or has been used as the means of committing a criminal offense. In addition to a conventional 
search conducted following issuance of.a warrant, examples of search warrants include: 


1. (U) Anticipatory Warrants 


(U) As the name suggests, an anticipatory warrant differs from other search warrants in 
that it is not supported by probable cause to believe that contraband exists at the premises 
to be searched at the time the warrant is isstied. Instead, an anticipatory search warrant is 
validly issued where there is probable cause to believe that a crime has been.or is being 
committed, and that evidence of such crime will be found at the described location at the 
time of the search, but only after certain specified events transpire. These. conditions 
precedent to the execution of an anticipatory warrant, sometimes referred to as 
"triggering events," are integral to its validity. Because probable cause for an anticipatory 
warrant is contingent on the occurrence of certain expected or "triggering" events, 
typically. the future delivery, sale, or purchase of contraband, the judge making-the 
probable cause determination must take into‘account the likelihood that the triggering 
event will occur on schedule and as predicted. Should these triggering.events. fail to 
materialize, the anticipatory warrant is void. ` À 


2. (U) Sneak and peek sèarch warrants 


(U) A sneak and peek search warrant allows law enforcement agents.to surreptitiously 
enter a location such as a building, an apartment, garage, storage shed, etc., for the 
purpose of looking for and documenting evidence of criminal activity. The purpose-of 
this type of warrant is to search for and seize property (either tangible or intangible) 

` without immediately providing notice of the search and a ‘return on the warrant tothe ` 
owner of the property searched or seized. See FRCP 41(f)(3). A sneak and peek warrant 
is used to gather additional evidence of criminal activity without prematurely exposing an 
on-going investigation. The evidence discovered during a sneak and peek search may bė 
used to support a request for a conventional search warrant. ` 


3. (U) Mail Openings 


(U) Mail in United States postal channels may be searched only pursuant to court order, 
or presidential authorization. United States Postal Service regulations governing such 
activities must be ‘followed. A search of items that are being handled by individual 
couriers, or commercial courier companies, under circumstances in which there isa 

_ Teasonable expectation of privacy, or have been sealed for deposit into postal channels, 
and that are discovered within properties or premises being searched, must be carried out 
according to unconsented FISA or FRCP Rule 41 physical search procedures. 


4. (U) Compelled Disclosure of the‘Contents of Stored Wire or Electronic 
Communications 


(U) Contents in “electronic storage” (eg., unopened e-mail/voice mail) require a search 
warrant. See 18 U.S.C. § 2703(a). A distinction is made between the contents of 
communications that are in electronic storage (e:g., unopened e-mail) for less than 180 
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days and.those in "electronic storage" for longer than 180 days, or those that are no 
longer in "electronic storage" (e.g:, opened e-mail). In enacting the ECPA, Congress 
concluded that customers may not retain a "reasonable expectation of privacy" in 
information sent to network providers. However, the contents of an e-mail message that 
is unopened should nonetheless be protected by Fourth Amendment standards, similar to 
the contents of a regularly mailed.letter. On the other hand, if the contents of an unopened 
message are kept beyond six months or stored on behalf of the customer after the:e-mail 
has been received or opened, it should be treated the same as a business record inthe 
hands of a third party, such as an accountant or attorney. In that case, the government 
may subpoena the records from the third party-without running afoul of either the Fourth 
or Fifth Amendment. If a search warrant is used, it may be served on the provider without 
notice to the customer or subscriber. i 


- 11.13.4. (U) Approval Requirements for Investigative Method i 
A. 


(U//FOUO) Search warrants issued under authority of FRCP Rule 41: A warrant to 
search is issued by a federal magistrate (or a state court judge if a federal magistrate is not 
reasonably available). Coordination with the USAO or DOJ is required to obtain the warrant. 


. (UIE OQUO)-FISA: In national security. investigations, Field:Office requests for FISA 


authorized physical searches must be submitted to FBIHQ using the FBI FISA Request Form. 
Field Office requests for FISA approval are tracked through FISAMS. This form should be 
completed by the case agent. : 


. (U//FOUO) Sensitive Investigative Matter: Notice to the appropriate FBIHQ substantive 


Unit Chief and Section Chief is required if the matter under investigation is a sensitive 
investigative matter. Notice to DOJ is also required, as described in DIOG Section 10. 


11.13.5. (U) Duration of Approval 
(U) The duration for the execution of a warrant is established by the.court order or warrant. 
11.13.6. (U) Specific Procedures 


A. 





(U) Obtaining a Warrant under FRCP Rule 41 


(U) Probable Cause. After receiving an affidavit or other information, a magistrate judge or 
a judge of a state court of record must-issue the warrant if there is probable cause to search 
for and seize a person or property under FRCP Rule 41(c). Probable cause exists where “the 
facts and circumstances within the FBI employee’s knowledge, and of which they had 
reasonably trustworthy information are sufficient in themselves to warrant a person of 
reasonable caution in the belief that...” a-crime has been or is being committed, and that 
seizable property can be found at the place or on the person to be searched: Probable cause is 
a reasonable belief grounded on facts. In judging whether a reasoriable belief exists, the test 
is whether such a belief would be engendered.in a prudent person with the officer’s ‘training 
and experience. To establish probable cause, the affiant must demonstrate a basis for 
knowledge and belief that-the facts are true and that there is probable cause to believe the 
items listed in the affidavit will be found at the. place to be searched. 


1. (U) Requesting a Warrant in the Presence of a Judge. 
a. (U) Warrant on an Affidavit: When a federal law enforcement officer or an 
attorney for the government presents an affidavit in support ofa warrant, the 
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judge may require the affiant to appear personally and may examine under oath 
the affiant and any witness the affiant produces. 


b. (U) Warrant on Sworn Testimony: The judge may wholly or partially dispense 
with a written affidavit and base a warrant on sworn testimony if doing so is 
reasonable under the circumstances. ; 


c. (U) Recording Testimony: Testimony taken in support of a warrant must be | 
- recorded by a court reporter or by a suitable recording device, and thé judge must 
file the transcript or recording with the clerk, along with any affidavit. 


2.. (U) Requesting a Warrant by Telephonic or Other Means. 


a. (U) In General: A magistrate judge may issue a warrant based on information 
communicated by telephone or other appropriate means, including facsimile 
transmission. 


`b. (U) Recording Testimony: Upon: léarning that an applicant is requesting a 
warrant, a magistrate judge must: (i) place under oath the applicant and any 
person on whose testimony the application is based; and (ii) make a verbatim 
record of the conversation with a suitable recording device, if available, or by a 
court reporter, or in writing. se i 

c. (U) Certifying Testimony: The magistrate judge must have-any recording or 
court reporter's notes transcribed, certify the transcription’s accuracy, and file a 
copy of the record and the transcription with the clerk. Any written verbatim 
record must be signed by the magistrate judge and filed with the clerk. 


d. (U) Suppression Limited: Absent a finding of bad faith, evidence obtained from 
a warrant issued under FRCP Rule 41(d)(3)(A) is not subject to suppression on 
the ground that issuing the wairant in that manner-was unreasonable under the 


circumstances. 


3. (U).Issuing the Warrant 


` (U) In general, the magistrate judge or a judge of a state court of record must issue the 


warrant to an officer authorized to execute it. The warrant must identify the person or 
próperty to be searched, identify any person or property to be seized, and designate the 
magistrate judge to whom it must be returned. The warrant must command the officer to: 
(i) execute the warrant within a specified time no longer than 10 days; (ii) execute the 
warrant during the daytime, unless the judge for good cause expressly authorizes 
execution at another time; and (iii) return the warrant to the magistrate judge designated 
in the warrant. 


- (U) Warrant by Telephonic or Other Means 


(U) If a magistrate judge decides to proceed under FRCP Rule 41(d)(3)(A), the following 
additional! procedures apply: ` 


a. (U) Preparing a Proposed Duplicate Original Warrant: The applicant must 
prepare a "proposed duplicate original warrant" and must read or otherwise 
transmit the contents of that document verbatim to the magistrate judge. 


205 
UNCLASSIFIED-FOR OFFICIAL USE ONLY 



































a. 


a. 


b. 


UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


b. (U) Preparing an Original Warrant: The magistrate judge must enter the 


contents of the proposed duplicate original warrant into an original warrant. 


(U) Modifications: The magistrate judge may direct the applicant to modify the 
proposed duplicate original warrant. In that case, the judge must also modify the 
original warrant. - 


(U) Signing the Original Warrant and the Duplicate Original Warrant: Upon . 
determining to issue the warrant, the magistrate judge must immediately sign the 
original warrant, enter on its face the exact time it is issued, and direct the 
applicant to-sign the judge's name-on the duplicate original warrant. 


5. (U) Executing and Returning the Warrant 


(U) Noting the Time: The officer executing the warrant must enter on its face the 
exact date and time it is executed. 


(U) Inventory: An officer present during the execution of the warrant must 
prepare and verify an inventory of any property seized. The officer must do so in 
the presence.of another officer.and-the.person from whom,.or from whose 
premises, the property was taken. If either one is not present, the officer must 


prepare and verify the inventory in the presence of at least one other credible ` 
person. 


(U) Receipt: The officer executing the warrant must: (i) give a copy of the © 
warrant and a receipt for the. property taken to the.person from whom, or from 
whose premises, the property was taken; or (ii) leave a copy of the warrant and 
receipt at the place where.the officer took the property. 


(U) Return: The officer executing the warrant must promptly return it — together 
with a copy of the inventory — to the magistrate judge designated on the warrant. 
The judge must, on request, give a copy of the inventory to the person from whom, 


or from whose premises, the property was.taken and to the applicant for the 
warrant. 


6. (U) Forwarding Papers to the Clerk 


(U) The magistrate judge to whom the warrant is returned must attach to the warrant a 
copy of the return, the inventory, and all other related papers and must deliver them to the 
clerk in the district where the property was seized. (FRCP Rule 41) 


7. (U) Warrant for a Tracking Device 


(U) Noting the time: The officer executing a tracking device warrant must enter 


on it the exact date and time the device was installed and the period during which 
it was used. 


(U) Return: Within 10 calendar days after the use of the tracking device has 


ended, the officer executing the warrant must return it to the judge designated in 
the warrant. 


(U) Service: Within 10 calendar days after use of the tracking device has ended, 

the officer executing the warrant must serve a copy of the warrant on the person 

who was tracked. Service may be accomplished by delivering a copy to the person 
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who, or whose property was tracked; or by leaving a copy at the person’s 
residence or usual place of abode with an individual of suitable age and discretion 
who resides at that location and by mailing a copy to the person’s last known 
address. Upon request of the. government, the judge may delay notice as provided 
in FRCP Rule 41()(3). 


(U) Delayed Notice 


(U) Upon:the government’s request, a magistrate judge—or if authorized by FRCP Rule 


41(b), a judge of a state court of record—may delay any notice oe by FRCP Rule 
41 if the delay is authorized by statute. 


B., (U) Obtaining a FISA Warrant 


(U) Applications for court-authorized physical search pursuant to FISA must be made by a 
federal officer in writing upon oath or affirmation and with the specific approval of the 
Attorney General. (See 50 U.S.C. § 1823) Each application must include: 


l. 


2: 


(U) The identity of-the federal officer making the application; 


(U) The authority conferred òn the Attorney General by the President and the approval of 
the Attorney General to-make the. application; 


. (U) The identity, if known, or description of the target ofthe physical search and a : 


detailed description of the premises or property to be searched. and of the information, 
material, or property to:be seized, reproduced, or altered; 


. (U) A statement of the facts and‘circumstances relied upon and submitted by the 


applicant that there is probable cause to believe that: 


a. (U) The target is a foreign power or an agent of a foreign power, vied that no 
United States person may be considered a foreign power or an agent of a foreign 
power solely on the basis of activities protected bythe First Amendment to the 
Constitution of the United States; and 


b: (U) Each of the facilities or places at which the FISA order is directed is being 
used by a foreign power or an agent of a foreign power. 


. (U) "In determining whether or not probable cause exists for purposes of an order under 


50 U.S.C. § 1823(a)(3), a judge may consider past activities.of the-target, as well-as facts 
and circumstances.relating to current or future activities of the target." 50 U.S.C. 

§ 1805(b). As it relates to United States citizens or aliens lawfully admitted for 
permanent residence, "agent of a foreign power" means any person who: 


a. (U) Knowingly engages in clandestine intelligence-gathering activities for or on 
behalf of a foreign power, whose activities-involve or may involve a violation of 
the-criminal statutes of the United States; 


. (U) Pursuant to the direction of an intelligence service or network of a foreign 
power, knowingly engages in any other clandestine intelligence activities for or 
on behalf of such foreign power, whose activities involve or are about to involve a 
violation of the criminal statutes of the United States; 
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(U) Knowingly engages in sabotage or international térrorism, or activities that 
are-in preparation therefore, for or on behalf of a foreign power; 


(U) Knowingly enters the United States under a false or fraudulent identity for or 
on behalf of a foreign power or, while in the United States, knowingly assumes a 
false or fraudulent identity for or on behalf of a foreign power; or 


.. (U) Knowingly aids or abets:any person in the conduct of activities described in 
- subparagraph ‘a,’ “b,’ or ‘c,’ above or knowingly conspires with any person to 


engage in activities described in subparagraph ‘a,’ ‘b,’ or ‘c,’ above. 50 U.S:C. 
§ 1801(b) (2). i 


(U) For purposes of the above statute, 50 U.S.C. § 1801(a).(1) defines "foreign 
power" to.include "a group engaged in international terrorism or activities in 
preparation therefore,” 50 U.S.C. §'1801(a) (4), as well as, among other things, "a 
foréign government or any component thereof, whether or not recognized by the ` 
United States." Title 50 of the United States Code Section 1801(c) defines 
“international terrorism" as activities that: 


(a) (U) Involve violent acts or acts dangerous to human life that are a violation of 
the criminal laws of-the United States orof any State, or that would be a 
criminal violation if committed within the jurisdiction of the United States or 
any State; 

(b) (U) Appéar to be intended— 

(1) (U) To intiniidate or coerce.a civilian population; 


(2) (U) To influence the policy of a government by intimidation or coercion; 
or : 


(3).(U) To affect the conduct ofa government by assassination or kidnapping; 
and . 


` (c) (U) Occur totally outside the United States, or transcend national boundaries 


in terms of.the means by which they are accomplished, the'persons they 
appear intended to coerce or intimidate, or the locale in: which their 
perpetrators operate or seek asylum by the applicant to justify thé belief that: 
(i) the target is a foreign power or agent of a foreign power; (ii) the premises 
or property to be.searched contains foreign intelligence information; and (iii) 
the premises or property to be searched is owned, used, possessed by, or is in 
transit to or from a foreign.power or-an agent of a foreign power. 


6. (U) A statement of the proposed minimization procedures that have been approved by the 


7. 


Attorney General; 


(U) A detailed description of the nature of the foreign intelligence information sought and 
‘the manner in which the physical search will be conducted; 


(U) A Certification by.the Director ofthe FBI or one of nine other individuals authorized 
by Congress or the President to provide such certifications that the information being 

.. Sought is foreign intelligence information; that a significant purpose of the search is to 
obtain foreign. intelligence information; that such information cannot reasonably be 
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obtained by normal investigative techniques; that the information sought is "foreign 
intelligence information" as defined by FISA; and:includes a statement explaining ‘the 
certifier’s basis for the certification. 


(U) Note: Title 50 of the United States Code Section 1804 specifies the Assistant to the 
President for National Security Affairs; E.O. 12949, as amended specifies the Director of 
the FBI, Deputy Director of the FBI, the Director of National Intelligence, the Principal’ 

. Deputy Director of National Intelligence, the Director of the Central ‘Intelligence:Agency, 
the Secretary of State, the Deputy Secretary of State, the Secretary of Defense, and the 
Deputy Secretary of Defense as appropriate officials to make certifications required by 
FISA, 


9. (U) Where the physical search may involve the residence of a United States person, the 
Attorney General must state what investigative techniques have previously been used to 
obtain the foreign intelligence information concerned and the degree to which these 
techniques resulted in acquiring such information; 


10. (U) A statement of the facts concerning all previous applications before the FISA court 
- that have béen made involving-any of the Persons, premises, or property specified i in the 
application and the actions taken on each previous application; 


11.(U) The Attorney General may require any other affidavit or certification from any other 
officer in connection with an application; and 


12, (U) The Court may require the applicant to furnish such other information as may-be 
necessary to make the determinations required to issue an Order. 


C. (U) Length of Period of Authorization for FISC Orders 


1. (U) Generally, 4.FISC Order approving-an'unconsented physical search will specify the 
period of time during which physical searches are approved and provide that the 
government will be permitted the period of time necessary to achieve the purpose, or for 
90 days, whichever is less, except that authority may be: 


a. (U) For no mote than-one year for "Foreign Power" targets (establishments); or 


b. (U) For no more than 120 days for an agent of a foreign power, with renewals for 
up to one year for non-United States persons. 


2. (U) An extension of physical search authority may be granted on the same basis as the 
original order upon a separate application for an extension and upon new findings made 
in the same manner as the original order. 


3. (U) Emergency FISA Authority 


a. (U) The Attorney General may authorize an emergency physical search under 
FISA when hé reasonably makes a determination that‘an emergency situation. 
exists that precludes advance FISA court review and approval, and there exists a 
factual predication for the issuance of a FISA Court Order, In such instances, a 
FIŠC judge must-be informed by the Attorney General or his designee at thè time 
of the authorization and an application according to FISA requirements is 
submitted to the judge as soon as is practicable but not more than seven (7) days 
after the emergency authority has been approved by the Attorney General. 
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b. (U) Ifa court order is denied after'an emergency authorization has been initiated, 
no information gathered as a result of the search may be used in any manner 
except if with the approval of the Attorney General, the information indicates a 
threat of death or serious.bodily harm to any person. 


c. (U//FOUO) For an emergency FISA for physical search|  ć  ć  ć | 









b2 
b7E 


4. (U) Special Circumstances 


(U) The President through the Attorney General may also authorize å physical search 
under FISA without a court order for periods of up to one year, ifthe Attorney General 
certifies that the search will be solely directed at premises, information, material, or 
property that is used exclusively by or under the open and.exclusive control of a foreign 
power; there is no substantial likelihood that the physical search will involve the, premises, 
information, material, or property of a United States person; and there are minimization 
procedures that have been reported to the court ahd Congress. The F BI's involvement in 
such approvals is usually in furtherance of activities pursued according to E.O. 12333. 
Copies of such certifications are to be transmitted to the FISA Court (see 50 U.S.C. 

§ 1822[a]). , 


(U) Information concerning United States persons acquired through unconsented physical 
searches may only be used according to minimization procedures. See: 50 U.S.C. 
` §§ 1824(d)(4) and 1825(a). 
5. (U) Required Notice , 
(U) If an authorized search involves the premises of a United States.person, and the . 
Attorney General determines that there is no national security interest in continuing the 
secrecy. of the search, the Attorney General must provide notice to the United States 


person that the premises was searched and the identification of any property seized, 
altered, or reproduced during the search. 


6. (U//FOUO) FISA Verification of Accuracy Procedures 


Ue) SaaS ee l 


b7E 


a. (U/FOUO) Each case file for which an application-is prepared for ubmission to_ 
the FISC will include a sub-file:to be labeled ee sub-file 52 


is to contain copies of the supportive documentation relied upon when making the 
ations fies ee | 


b7E 


file is to include: 


b2 
b7E 


b2 
b7E 
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iii. (U//FOUO)Y 
ae 


~ b. -CU//FOUO 
E 


7. (U//FOUO) FISA Physical Search Administrative Sub-file . 
(U/IFOUO) Each-case file for which an application is or has been prepared for 5 
submission to the:FI ill include a sub-file to be labeled’ e cae 
seen sub-file is to contain copies of all applications to and ` 
orders issued by the FISC for the conduct o 


f physical searches in the investi ative case. 
' The following date must be'included in e 










8. (U//FOUO) FISA Review Board for FISA Renewals 


(U//FOUO b2 
b7E 


a. (U//EQUO} 






(A (U//FOUO} 
b2 
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11.14. (U) Investigative Method: Acquisition of foreign intelligence information in 
conformity with Title VII of the Foreign Intelligence Surveillance Act 


11.14.1; (U) Summary 


(U) Titles I and lof the FISA (codified as 50 U.S.C. §§ 1801, et seq.) provide the standard, 
‘traditional methods-of collection against agents of foreign powers (including: United States and 
non-United States persons) and foreign power establishments inside the United States. Title VII 
of FISA, “Additional Procedures-Regarding Certain Persons Outside the United States,” provides 
means for collections of individuals outside the United States. 


11.14.2. (U) Legal Authority 

(U) FISA Amendments Act of 2008 (122 Stat 2436) . 

(U) AGG-Dom, Part V.A.13 ‘ 

11.14.3. (U) Definition of Investigative Method’ 

_ (U) Title VIL.is-to be used for conducting-FISAs on certain persons located outside the United 


States 


11.14.4. (U//FOUO) Standards for Use and Approval Requirements for Investigative 
Method 


(U//FOUO) See requirements under DIOG Sections 11.12 and 11.13 and requirements specified 
above. i 


11.14.5. (U) Duration of Approval : 
(U/FOUO) See requirements under DIOG Sections.11.12 and 1 1.13 
11.14.6. (U//FOUO) Specific Collection Procedures for Title VI 
(U) The relevant procedures (or collections) under Title VII are: 


A. (U) Section 702 - "Procedures for Targeting Certain Persons Outside the United States 
Other than United States Persons" 


(U//FOUO) Under Section 702, the Government has the authority to target non-United States 

, Persons who are located outside the United States if the collection is effected with the 
assistance of a United States provider and if the collection occurs inside the United States, 
This section does not require a traditional FISA request. Rather, under this section the 
Attorney General and the Director of National Intelligence are required to file yearly 
determinations (filed as "Certifications") with the FISC that authorize the targeting of 
persons reasonably believed to be located outside the United States to acquire foreign 
intelligence information. The Certifications are accompanied by, in the case of the FBI, an 
affidavit signed by the FBI Director. In addition, the FBI is required to file "Targeting 
Procedures" designed to ensure that the acquisition is limited to persons reasonably believed 
to be located outside the United States and "to prevent the intentional acquisition of any 
communications.as to which the sender and all intended recipients are known at the time of 
the acquisition to be located in the United States.""F inally, the FBI is also required to follow 
minimization procedures. : 
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B. (U) Section 703:- "Certain Acquisitions Inside the United States Targeting United States 





Persons Outside the United States" 


(U//FOUO) Under Section 703, the Government has the authority to target United States 
persons who are located outside the United States if the collection is effected with the 
assistance of-a United States provider and if the collection occurs inside the United States. 
This section orily authorizes electronic surveillance or the acquisition of stored electronic 
communications or stored electronic data that requires a court order. Under this section, the 
FBI will submit a FISA request and obtain a FISC order and secondary orders, as needed. 
The. process is the same as the current FISA process. Refer to the FISA Unit's website for 
further information. This section allows for emergency. authorization and the FBI's Standard 
Minimization Procedures apply to the collection. Finally, under the statute, the surveillance 
must cease immediately if the target enters the United States. If the FBI wishes to surveil the 
United States person while he.or she is in the United States, the FBI must obtain a separate 
court order under Title I (electronic surveillance) and/or Title III-(physical search) of FISA in 
order to surveil that United States person while the person is located in the United States. 


C. (U). Section 704 - "Other Ac uisitions Targeting United States Persons Outside the 
q 8 


United States" 


(U//FOUO) Under Section 704, the Government has the authority to target United States 
persons who are located outside the United States if.the collection oċcurs outside the United 
States:(i.e., without the assistance of a United States’ provider). The statute requires that.the 
FISA court issue an order finding probable cause to believe that the United States person 
target is an agent of a foreign power and reasonably believed to be located outside the United 
States "under circumstances in which the targeted United States person has a reasonable 
expectation of‘privacy and a warrant would be required if the acquisition were conducted in 
the United States for law enforcement purposes." Under this section; the FBI will submit a 
FISA request and obtain a FISC order but will not obtain secondary orders. The-process for 
obtaining these orders is the same as the current FISA request process. Refer to the FISA 
Unit's intranet website for further information. This section allows for emergency 
authorization and the FBI's Standard Minimization Procedures apply to the collection. 
Finally, surveillance authorized under this section must cease if the United States person 
‘enters the. United States.but may be re-started if the person is again reasonably believed to be 
outside. the United States during the.authorized period of surveillance: However, if there is a 
need to surveil the target while the target is located inside the United States, a separate court 
order must be obtained. 


(U//FOUO) Generally, the F BI requires the assistance of other USIC agencies to implement 


‘this type of surveillance; Specific procedures for requesting that another USIC agency 
implement the surveillance for the FBI, if necessary, are classified and delineated in FBI 


Corporate Policy 121N. 
- (U) Section 705 - "Joint Applications ‘and Concurrent Authorizations" 
(U//FOUO) Section 705(a), “joint applications,” allows for the FISC to, upon request of the 


FBI, authorize a joint application for targeting a United States person under both Sections 
703 and 704 (inside and outside the United States simultaneously), 
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(U//FOUO) Section 705(b), “concurrent authorizations,” states that if an order has been 
obtained under Section 105 (electronic surveillance under Title I of FISA) or 304 (physical 
search under Title III of FISA), the Attorney General may authorize the targeting of a United 
States:person while such person is reasonably believed to be located outside the United States. 
The Attorney General has this authority under E.O. 12333 § 2.5. In other words, if a United 
States person target of a "regular" FISA travels outside the United States during the 
authorized period of the surveillance, the Attorney General, under Section 705(b) and E.O. 
12333 § 2.5, can concurrently authorize surveillance to continue while the person is overseas 
obviating the need to obtain a separate order under Sections 703 or 704. To effectuate this 
authority, the. Attorney General's "Approval page" on all FBI United States person FISAs 


contains standard language authorizing surveillance abroad, if needed. 
(U//FOUO) . 
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12. (U) Assistance to Other Agencies 


12.1. (U) Overview 


(U//FOUO) Part II of the AGG-Dom authorizes the FBI to conduct investigations in order to 
detect or obtain information about, and prevent and protect against, federal crimes and threats to 
the national security and to collect foreign intelligence. Part III of the AGG-Dom, Assistance to. 
Other Agencies, authorizes the FBI to provide investigative assistance:to other federal, state, 
local or tribal, or foreign agencies when the investigation has those same objectives or when the 
investigative assistance is legally authorized for other purposes. Accordingly, FBI employees 
may provide assistance even if it is not for one of the purposes identified as grounds for an FBI 
investigation or assessment, if providing the assistance is otherwise authorized by law. For 
example, investigative assistance is legally authorized in certain. contexts to state of local 
agencies in the investigation of crimes under state or local law, as provided in 28 U.S.C. - 

- §§ 540—felonious killing of state and local law enforcement officer; 540A—violent crime 
against travelers; 540B—serial killings, and.to foreign agencies in the-investigation of foreign 
law violations pursuant to international agreements. The FBI may use appropriate lawful 
methods in.any. authorized investigative-assistance activity: a r 


12.2. (U) Purpose and Scope 
(U) The AGG-Dom permits FBI personnel to provide investigative assistance to: 
A. (U) Authorized intelligence activities of other USIC agencies; 


B. (U) Any federal agency in the investigation of federal crimes, threats to the riational security, 
foreign intelligence collection, or any other purpose that may be lawfully authorized; 


C. (U) Assist the President in determining whether to use the armed forces pursuant to 10 U.S.C. 
' §§ 331-33, when DOJ-authorized as described in Section 12.5:B.1.c, below; 


D. (U) Collect information necessary to facilitate public demonstrations in order-to protect the 
exercise of First Amendment rights and ensure public health and’safety, when DOJ- 
authorized and within the restrictions described in Section 12.5.B.1.d, below; 


E. (U) State or local agencies in the investigation of crimes under state or local law where 
authorized by federal law (e.g., 28 U.S.C..§§ 540—felonious killing of state and local law 
enforcement officer; 540A—violent crime against travelers; 540B—serial killings); 


F. (U) State, local, or tribal agencies in the investigation of matters that may involve federal 
crimes or threats to national security, or for such other purposes as may be legally authorized; 
and 


G. (U) Foreign agencies in the investigations of foreign law violations pursuant to international 
agreements, and as otherwise set forth below, consistent with'the interests of the United 
States (including national security interests) and with due consideration of the effect onany - 
United States person. 


(U) The FBI is further authorized to provide technical and scientific assistance to all duly 
constituted law enforcement agencies, other organizational units of the. Department of-Justice, 
and other federal agencies. 28 C.F.R. § 0.85(g). The FBI’s authority and procedures for 
providing technical assistance is further set forth in Section 12.6 below. 
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(U) Authorized investigative assistance by the FBI to other agencies includes participation in 
joint operations and activitics with such agencies. (AGG-Dom, Part III.E.1) The procedures for 
providing investigative assistance, together with the approval-and notification requirements, are 
provided below. 


12.3. (U//FOUO) Standards for Providing and Approving Investigative Assistance to 
Other Agencies a 


(U//FOUO) The determination of whether to provide FBI assistance to other agencies.is both 
statutory and discretionary and must be based on consideration of the following factors: 


A. (U//FOUO) Assistance is within the scope authorized by the AGG-Dom; 


B. (U//FOUO) Assistance is not based solely on the exercise of First Amendment activities or 
` onthe race, ethnicity, national origin or religion of the subject;.and 


C. (U//FOUO) Assistance is an appropriate use of personnel and financial resources. 
12.4. ` (U) Documentation, Record Retention and Dissemination 
A. (U) Documentation 
(U//FOUO) When providing assistance to a domestic‘or foreign agency, the required 
documentation. in an appropriate case file includes: (i) the name and type of agency; (ii) the 


investigative methods used; (iii) the opening and closing dates of the request: and 
notifications required for the investi 







ative activity. 








b2 
Þ7E 
B. .(U) Records Retention for Assistance Furnished to Another Agency 
(U/FOUO) A database of records created with the lis maintained to permit the oe 
prompt retrieval of the status of the assistance activity (opened or closed), the dates of : 
opening and closing, and the basis for the assistance activity. (AGG-Dom, Part UII.E.3) 
C. (U) Dissemination of Information - 
(U//FOUO) For unclassified information, thel___] should be used to document the ` ip 
dissemination of information to: (i). United States Intelligence Community Agencies; (ii) b7E 


United States Federal Agencies; (iii) State, Local, or Tribal Agencies; and (iv) Foreign 
Agencies. Dissemination to Foreign Agencies must be in accordance'with the FBI Foreign 
Dissemination Manual, dated May 23, 2008. Classified information must be disseminated 
pursuant to applicable federal law, Presidential directive, Attorney-General policy and FBI 
policy. , I : 


12.5. (U) Duration, Approval and Notice for Investigative Assistance to Other Agencies 


(U//FOUO) Investigative assistance that may be furnished to other agencies is described below — 
y agency type. Dissemination of information to-other agencies must be consistent with Director 


217 
UNCLASSIFIED-FOR OFFICIAL USE ONLY 








UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


of National Intelligence directives, the AGG-Dom, DIOG Section 14, FBI Foreign 
Dissemination Manual, and any applicable MOU/MOA, law, treaty or other policy. 





(U//FOUO) Sensitive Investigative Matter: Any assistance to other agencies involving a 
sensitive investigative niatter requires CDC review, SAC approval, and notification to the 
appropriate FBIHQ substantive Unit Chief and Section Chief. (If assistance is to a foreign 
agency, notification to the Office of International Operations (O10) Unit Chief and Section Chief 
is also required.) Additionally, FBIHQ must provide notice to the DOJ Criminal Division or 
NSD as soon as practicable, but not later than 30 calendar days after the initiation of any: 
assistance involving a sensitive investigative matter (see classified appendix for additional notice 
requirements), 


A. (U) United States Intelligence Community Agencies 
1. (U) Authority | 


(U//FOUO) The FBI may provide investigative assistance (including operational support) 
to authorized intelligence activities of other USIC agencies. (AGG-Dor, Part IH.A). 
Investigative assistance must be in compliance with interagency memoranda of 
understanding/agreement, if applicable. For example,-specific approval -and.notification 
requirements exist for CIA: domestic activities. 


2. (U) Approval 


(U//FOUO) Prior SSA approval is required for providing assistance to the USIC when the 
assistance uses investigative methods beyond those authorized in assessments, Assistance 
to other agencies using an investigative method authorized.only for predicated 
investigations requires supervisory approval at the same level required for the respective 
investigative method if used in an FBI investigation. Specifically, higher supervisory 
approval and notification requirements may exist for conducting a joint operation (e.g., 
investigative operations with the Department of Defense [DoD], Department of 
Homeland Security), a sensitive investigative matter, and using particular investigative 
methods as noted in Sections 10 and 11, and the Division policy guides. Assistance for 
investigative methods beyond those authorized in assessments must be documented in the 
FD-999. Approval for use of specific technologies is set forth in Section 12.6 below and 
the OTD Manual. 


B. (U) United States Federal Agencies 
1. (U) Authorities 


a. (U//FOUO) The FBI may provide assistance to any other federal agency in the 
investigation of federal crimes or threats to the national security or in the collection of 
positive foreign intelligence. (Pursuant to Section 9, collection of positive foreign 
intelligence requires prior approval from FBIHQ CMS.) The FBI may provide 
investigative assistance to any federal agency for any other purpose that may be 
legally authorized, including investigative assistance to the Secret Service in support 
of its protective responsibilities, (AGG-Dom, Part III.B.1) See DIOG Section 12.6 
below for guidance in providing technical assistance to federal agencies, 
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b. (U//FOUO) The FBI must follow MOU/MOA with other federal agencies where 
applicable. Specific approval and notification requirements exist for CIA and DoD 
domestic activities. 


c. (U) Actual or Threatened Domestic Civil Disorders 


Te 


iii. 


(U) At the direction of the Attorney General, the Deputy Attorney General, or 
the Assistant Attorney General for the Criminal Division, the FBI shall'collect 
information relating to actual or threatened civil disorders to assist the:President 
in determining (purstiant to the authority of the President.under 10 U.S.C. 

§§ 331-33) whether use of the armed forces or militia is required and how a 
decision to commit troops should be implemented. The information sought shall 
concern such matters as: (AGG-Dom, Part IH:B.2) 


(a) (U) The size of the actual or threatened disorder, both in number of people 
involved or affected and in a geographic-area; ` . 


(b) (U) The potential for violence: 


(c) (U) The potential for expansion of the disotder in light.of community 
conditions and underlying causes of the disorder; 
(d) (U) The relationship of the actual-or threatened disorder to the enforcement of 


federal law or court orders and the likelihood that state or local authorities will 
assist in enforcing those laws or orders; and 


(e) (U) The extent of state or local resources available to handle the disorder. 


(U) Civil disorder investigations will be authorized only for a period of 30 dàys, 
but the authorization may'be renewed for subsequent 30 day periods. 


(U) The only investigative methods that maybe used during 4 civil disorder 
investigation are: 


(a) (U) Obtain publicly available information; 
(b) (U) Access and examine FBI and other DOJ records, and obtain information 


from any FBI or other DOJ personnel; 


(c) (U) Access and examine records maintained by, and request information from, 
other federal, state, local, or tribal, or foreign governmental entities-or 
agencies; 


(d):(U) Use online services and resources (whether nonprofit or commercial); 
(e): (U) Interview members of the public and private entities: and 


(U//FOUO).Note: Such interviews may only be conducted if the FBI 
employee identifies himself or herself as an FBI employee and accurately 
discloses the purpose of the interview. 


(f) (U) Accept information voluntarily provided by governmental or private 
entities. . ` 
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(U) Other methods may be used only if ‘authorized by the Attorney General, 
.the Deputy Attorney General, or the Assistant Attorney General for the 
Criminal Division. 


d. (U) Public Health and Safety Authorities in Relation to Demonstrations 


L 


2. (U) ‘Approval 


(U) At the direction of the Attorney General, the: Deputy Attorney General, or 
the Assistant Attorney General for the Criminal Division, the FBI shall collect 
information relating to.demonstration activities that are likely to require the 
federal government to take action to facilitate the activities and providè public 
health and safety measures with respect to those activities. The information 
sought in such an investigation shall be that néeded to facilitate an adequate 
federal response to ensure public health and safety and to protect the exercise of 
First Amendment rights, such as: ‘ 


(a) (U) The time; place, and type of activities planned. 
(b) (U) The number of persons expected to participate. 


(c) (U) The expected means and routes of travel for participants and expected 


time of arrival. 


~ @)-(U) Any plans for lodging or housing of participants in connection with the 


demonstration. 


(U) The only investigative methods that may be used in an investigation:under 
this paragraph are: , 


(a) (U) Obtain publicly available information; 


(b) (U) Access and’examine FBI and other DOJ records, and.obtain information 
from any: FBI or other DOJ personnel; i 


(c) (U) Access and examine records maintained by, and request information from, 


other federal, state, local, or tribal, or foreign governniental entities or 
agencies; 


(d) (U) Use online services and resources (whether nonprofit or commercial); 
(e) (U) Interview of members of the public and. private entities; and 


_ (U//FOUO) Note: Such interviews may only be conducted if the FBI 
employee identifies himself or herself as an. FBI employee and.accurately 
discloses the purpose of the interview. 


(f) (U) Accepf‘information voluntarily provided by governmental or private 
entities. i ; 


_ (U) Other methods may be used only if authorized by the Attorney General; 
the Deputy Attorney General, or the Assistant Attorney General for the 
Criminal Division. 


(UF OUO) Prior SSA approval is required for assistance to another federal agency when 
the assistance uses investigative methods beyond those authorized in assessments. . 
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Assistance to other agencies using an investigative method authorized only for predicated 
investigations requires supervisory approval at the same level required for the respective 
investigative method if used in an FBI investigation, as provided in Section | 1. 
Specifically, higher supervisory approval and notification requirements may exist for 
conducting a joint operation, a sensitive investigative matter, and using particular 
investigative methods, as noted in Sections 10 and 11 and in the-Division policy guides. 
Assistance for investigative methods beyond those authorized in assessments must be 
documented in the-FD-999. Approval for use of specific technologies is set forth in 
Section 12.6, below and the OTD Manual. 


C. (U) State, Local, or Tribal Agencies 
1. (U) Authorities 


a. (U) The FBI may provide investigative assistance to state, local, or tribal agencies in 
the investigation of matters that may involve federal crimes or threats to the national 
security, or for other legally authorized purposes. Legally authorized purposes include, 
but are not limited'to, a specific federal statutory grant of authority such as that 
provided by 28 U.S.C. §§ 540—felonious killing of state and local law enforcement 
officer; 540A—violent crime. against travelers; 540B—serial killings. (AGG-Dom, 

~ Part TII-C) The FBI is further authorized to provide other material, scientific and 
technical assistance to state, local, and tribal agencies. (See 28 C.F.R. § 0.85[g] and 
DIOG Section 12.6, below.) 


b. (U//FOUO) The FBI must follow applicable MOU/MOA and/or treaties when it 
provides assistance to state, local, and tribal agencies. 


c. (U//FOUO) As a federal agency, the FBI's authority to investigate criminal offenses 
derives from federal statutes and is generally limited to violations of federal. law. See 
18 U.S.C. § 3052, 28 U.S.C. § 533 (1) and 28 C.F.R. § 0.85. With limited exceptions, 
such as those cited in Section 12.2.E., above, the FBI does not have any federal 
authority to investigate state crimes. FBl:employees can assist in the investigation of 
other criminal matters with state and local authorities only if there is a reasonable 
basis to believe that the investigation will prevent, detect or lead to evidence of a 
violation of federal law or a threat to the national securit 








d. (U/FOUO ` 
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O) When credible. information is received by an FBI employee concerning 
serious criminal activity not within the FBI’s investigative jurisdiction, the FBI 
employee must promptly transmit the information or refer the complainant to a law 
enforcement agency having jurisdiction, except when disclosure would jeopardize an 
ongoing investigation, endanger the safety of an individual, disclose the identity of a 
human source, interfere with a human source’s cooperation, or reveal legally 
privileged information. If full-disclosure is not made for any of the reasons.indicated, 
then, whenever feasible, the FB] employee must make at least limited disclosure to a 
law enforcement agency or agencies having jurisdiction, and full disclosure must be 
made as soon as the need for restricting the information is no‘longer present. Where 
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disclosure is not made to the appropriate law enforcement agencies within 180 days, 
the FBI employee/Field Office must notify the appropriate substantive Unit at FBI 
Headquarters in writing concerning the facts and circumstances concerning the 
criminal activity. FBI Headquarters is required to make periodic reports to the Deputy 


Attorney General on such non-disclosure and incomplete disclosures, (AGG-Dom, 
Part VI.C.2) 


2. (U) Approval a 


(U//FOUO) Prior SSA approval is required for assistance to state, local, or tribal agencies 
when the assistance uses investigative methods beyond those authorized- in assessments. 
Assistance to other agencies using an investigative method authorized only for predicated 
investigations requires supervisory approval at the same level required for the respective 
investigative method if used in an FBI investigation. Specifically, higher supervisory 
approval and notification requirements may exist for conducting a joint operation, a 
sensitive investigative matter, and using particular investigative methods, as noted in 
Sections 10 and 11 and in the Division policy guides. Assistance for investigative . 2 
methods beyond those authorized in assessments must be documented in the FD-999. 


Approval for use of specific technologies is set forth in Section 12.6, below and the OTD 
Manual. 











D: (U) Foreign Agencies 

1. (U//FOUO) General: The foundation of the FBI’s international program is the Legat: 
Each Legat is the Director’s-personal representative in-the foreign countries in which 
he/she resides or has regional responsibilities. The Legat’s job is‘to respond to the FBI’s 
domestic and foreign: investigative needs. The Legat can accomplish this because he or 
she has developed partnerships and fostered cooperation with his-or her foreign 
counterparts on every level and is familiar with investigative rules, protocols, and 
practices that differ from country to country. This is the Legat’s primary responsibility. 
As such, foreign agency requests. for assistance will likely come tothe FBI through the 
Legat. If, however, foreign agency requests for assistance bypass the Legat, the:FBI 
employee must notify the Legat. and OIO, as discussed in greater detail below. 

2. (U) Authorities ` 


a. (U//FOUO) At the request of foreign law enforcement, intell 
agencies, the FBI may conduct investigations or provide assistance to investigations 
by such agencies, consistent with the interests of the United States (including national 
security interests) and with due consideration of the effect on any United States 
person. (AGG-Dom, Part HI.D. 1) The FBI must follow applicable MOUs, MOAs, 


Mutual Legal Assistance Treaties (MLAT) and other treaties when it provides 
assistance to foreign governinents. 


i UU OUG | oe ee 


igerice, or security 


b2 
” b7E 
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c. (U//FOUO) The FBI may not provide assistance to foreign law enforcement; 
intelligence, or security officers conducting investigations within the United States 
unless such officers have provided prior written notification to the Attorney General 
of their status as an agent of a foreign government, as required by 18 U.S.C. § 951. 
(AGG-Dom, Part ITI.D.2) The notification required by 18 U.S.C. § 951 is not 
applicable to diplomats, consular officers or attachés. 












d. (U//FOUO) Upon the request of a foreign government agency, the FBI may conduct 


background inquiries concerning individuals-whose consent is documented. (AGG- 
Dom, Part III.D.3) 






€. (U//FOUO) The AGG-Dom, Part III.D.4 authorizes the FBI to provide other material 


and technical assistance to foreign governments to the extent not otherwise prohibited 


by law. AG Order 2954-2008 authorizes the FBI to provide technical assistance to 
foreign governments, as referenced below in Section 12.6. 


3. (U) Approval 


a. (U//FOUO) Prior SSA approval is required for all assistance'to foreign agencies. All 


assistance must be documented in the FD-999 and that approval should be 
documented in the file. 


b. (U//FOUO 













c.’ (U//FOUO 





d. (U/FQUO b2 
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b2 
b7E 
ii. 
b2 
b7E 
4. (U) Notice 
a. (U//FOUO b2 
b7E | 
b. (U) The FBI must notify the DOJ NSD concerning investigation or assistance where 
both:.(i) FBIHQs approval for the activity is required (e.g., FBIHQ approval required 
to use a particular investigative. method); and (ii) the activity relates to a threat to the 
‘United States national security. The FBIHQ Division approving the use of the ; 
investigative:method must notify DOJ NSD as soon as practicable, but no later than ie 
30 calendar days after FBIHQ approval (see classified appendix fof o e] 
(AGG-Dom, Part III.D.1) 
5. (U) Dissemination 
(U//FOUO) All dissemination of FBI information to foreign agencies must be conducted 
according to the FBI Foreign Dissemination Manual, dated May 23, 2008 
12.6. (U//EOUO) Standards for Providing and Approving Technical Assistance to.Foreign, 
State, Local and Tribal Agencies a 
A. (U) Authority 
1. (U/FOUO b2 
T b7E 
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b7E 
¢. (U//FOUO) 
b2 
d. (U/FOUOY b7E 
= ; b2 
e. (U//FOUO 








_ B. (U) Approval 


(U//FOUO) All technical assistance must be approved by the Director or his-designated 
senior executive FBI official,-as provided in the OTD manual. Ali technical assistance must 
be documented in an FBI assessment file, predicated investigation file, a domestic police: 
cooperation file, a foreign police cooperation file, or other investigative/technical assistance 


control file, Additionally, all technical assistance must be documented in the-FD-999 or its 
successor. 
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13. f (U) Extraterritorial Provisions 


13.1. (U) Overview 
(U//FOUO) The.FBI may conduct investigations abroad, participate, with foreign officials in 


investigations abroad,.or otherwise conduct activities outside the United States. The guidelines 
for conducting investigative activities outside of the United States are currently coritained in: (i) 
The Attorney General’s Guidelines Jor Extraterritorial FBI Operations and Criminal 
Investigations; (ii) The Altorney General’s Guidelines Sor FBI National Security Investigations 
and Foreign Intelligence Collection; and (iii) The Attorney General Guidelines on the 
Development and Operation of FBI Criminal Informants and Cooperative Witnesses in 
Extraterritorial Jurisdictions (collectively, the Extraterritorial Guidelines). The Attorney 
General's Guidelines for Extraterritorial FBI Operations are currently being drafted, as 
discussed in DIOG Section 2: 1, and will supercede. the above listed guidelines, or applicable 
provisions thereof. 


13.2. (U) Purpose and Scope 


(U//FOUO) As a general rule, the Extraterritorial Guidelines apply when FBI personnel or 
confidential human sources are activel _ engaged ‘in investigative activity outside the borders of 













‘the United States. b2 
b7E 
b2 
= : bTE 
A. (U//FOUO i 
ao. 
aa ' |. b7E 





B. (U/FOUO 


. — b2 
‘C. (U//EOUO} b7E 
b2 






D. (U//FOUO) go Ue 
z movo — ————— BIE p 
F. (U//FOUO b7E 
b2 
G. b7E 
b2 
H. b7E 
b2 
L 57E 
J. (U/FOUO b2 
A b7E 
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(U//FOUO) FBI personnel planning to engage in any of the investigative activities described in 

the subsection above must obtain the concurrence of the appropriate Legat and must comply with 
the remaining procedural requirement of the Extraterritorial.Guidelines, For additional i 
information consult the Extraterritorial Section of the OGC website. i 


13.3. (U) Legal Attache-Program 


(U//FOUO).The foundation of the FBI’s international program is the Legat. Each Legat is the 
Ditector’s personal representative in the foreign countries in which he/she resides or has regional 
responsibilities. The Legat’s job is to respond to the FBI’s domestic and extraterritorial 
investigative needs. Legats can accomplish this mission because they have developed 
partnerships and fostered cooperation with their foreign counterparts on every level and are 
familiar with-local investigative rules, protocols, and practices which differ from country to 
country. For additional information consult the FBIHQ OIO website. 
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14, (U) Retention and Sharing of Information 


14.1. (U) Purpose and Scope 


(U//FOUO) Every FBI component is responsible for the creation and maintenance of authentic, 
reliable, and trustworthy records. Without complete and accessible records, .the FBI cannot 
‘conduct i investigations, gather and analyze intelligence, assist with the prosecution of criminals, 
or-perform any of its critical missions effectively. . 


(U//FOUO) The FBI is committed to ensuring that its records management program 
accomplishes the following goals: 


A. (U//FOUO) Facilitates the documentation of official decisions, policies, activities, and 
transactions; i 


. (U//FOUO) Facilitates the timely retrieval of needed information; 
. (U//FOUO) Ensures continuity of FBI business; 
. (U/IFOUO). Controls the creation and growth of FBI records; 


. (U//FOUO) Reduces operating costs by managing records according to FBI business ñeedà 
and by disposing of unneeded records in a timely manner; 


mw o aw 


"rj 


. (U//FOUO) Improves efficiency-and productivity through effective records storage and 
retrieval methods; 


. (U//FOUO) Ensures compliance with applicable laws and regulations; 
. (U//FOUO) Safeguards the FBI’s mission-critical information; 
(U//FOUO) Preserves the FBI’s corporate memory and history; and 


“rom Og 


(U//FOUO) Implements records management technologies to support all of the goals listed l 
above. 


14.2. (U) The FBI’s Records Retention Plan, and Documentation 


(U//FOUO) The FBI must retain records relating to investigative activities according to a records 
retention plan approved by the NARA. (AGG-Dom, Part VI.A.1) 


(U//FOUO) The FBI’s disposition authorities provide specific instructions aout the length of 
time that records must be maintained. In some instances, records may be destroyed:after a ` 
prescribed period of time has elapsed. Other records are never destroyed and are transferred to 
NARA a certain number of years after a case was closed. 


’ A. (U//FOUO) The FBI must maintain a database or records system that permits, with respect to 
each predicated investigation; the prompt retrieval of the status of the investigation (open or 


closed), the dates of opening and closing, and the basis for the investigation. (AGG-Dom, 
Part VI.A.2) 


(U//FOUO) The FBI has updated its official File Classification System to cover records 
related to all investigative.and intelligence collection activities, including assessments. 
Records are maintained in the FBI’s Central Records System or other designated systems of 
records, that provide the requiréd maintenance and retrieval functionality. 
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B. (U//FOUO) Assessments must also adhere to the standards as set forth in the Records 
Management Division Disposition Plan and Retention Plan. All records, including 
assessments, may be destroyed or expunged earlier than the destruction schedule through 
proper authority. 


(U//FOUO) All Bureau records are maintained for their full retention periods, except under 
certain. circumstances under which they may be either destroyed earlier or retained longer. 
Records may be retained for a longer period than their disposition authority specifiés, if they 

"are subject to a litigation -freeze. Court orders may direct that certain records be expunged 
from a case file, or (more rarely) that the entire case file be expunged. Under certain 
circumstances, individuals may, also request that certain records be expunged. Expungement 
of records may mean the physical removal and destruction of some or all of the record or, 
depending on the court order and the governing statute or program, it may mean the removal 
sealing; and secure storage of records away from the remaining file. In most instances, only 
certain documents, not the entire file, are subject to expungement. 


14.3. (U) Information Sharing 
(U//FOUO) The FBI 2008 National Information Sharing Strate ; (NISS) provides.the common 


vision, goals, and framework needed to guide information sharing initiatives with our federal, 
state, local, and tribal agency partners; foreign government counterparts, and private sector 
stakeholders. The FBI NISS addresses the cultural and technological changes required to move 

` the FBI to “a responsibility to provide” culture. This will be accomplished by using the best 
practices and technology standards of both communities as we support the intelligence and law 
enforcement communities in collection, dissemination, analysis, collaboration, and operational 
efforts. : 


A. (U) Permissive Sharing 


(U//FOUO) Consistent with the Privacy Act’ and any other applicable laws and memoranda 

of undérstanding or agreement with other-agencies concerning the dissemination of 

information, the FBI may disseminate information obtained or produced through activities 
‘under the AGG-Dom: 


1. (U//FOUO) Within the FBI and to all other components of the Department of Jiistice if 
the recipients have need of the information in the performance of their official.duties. 


2. (U//FOUO) To other federal agencies if disclosure is compatible with the purpose for 
which the information was collected and it is related to their responsibilities. In relation 
to other USIC agencies, the determination whether the information is related to the 
recipient responsibilities may be left to the recipient. 


3. (U//FOUO) To state, local, or Indian tribal agencies directly engaged in the criminal 
justice process where access is directly related to a law enforcement function of the 
recipient agency. 


4. (U//FOUO) To congressional ‘committees as authorized -by the DOJ Office of 
Legislative Affairs. 


5. (U//F QUO) To foreign agencies if the FBI determines that the information is related to 
their responsibilities; the dissemination is corisistent with the interésts of the United 
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States (including national security interests); and where the purpose of the disclosure is 
compatible with the purpose for which the information was collected. 


6. (U//FOUO) If the information is publicly available, does not identify United States 
persons, or is disseminated with the consent of the person whom it concerns. 


7. (U//FOUO) If the dissemination is necessary to protect.the safety or security of persons 
or property, to protect against or prevent a crime or imminent threat to the national 
security, or to obtain information for the conduct-of an authorized FBI investigation. 


8. (U//FOUO) If dissemination of the information is otherwise permitted by the Privacy 
Act (5 U.S.C.§ 552a) (AGG-Dom, Part VI.B.1) 


(U//FOUO) All FBI information sharing activities under this section shall be according to 
Corporate Policy Directive 12D, “FBI Sharing Activities with Other Government Agencies,” 
95D “Protecting Privacy in.the Information Sharing Environment,” and any amendments 
thereto and applicable succeeding policy directives. 


- (U) Required Sharing 


(U//FOUO) The FBI must share and disseminate information as required by statutes, treaties, 
Executive Orders, Presidential directives, National Security Council directives, Homeland. 
Security Council directives, DNI directives, Attorney General-approved policies, and MOUs 
or MOAs; as consistent with the Privacy Act. 


14.4. (U) Information Related to Criminal Matters 


A. (U) Coordinating with Prosecutors 


(U//FOUO) In aņ investigation relating to possible criminal activity in violation of federal 
law, the FBI employee conducting the investigation must maintain periodic written or oral 
contact with the appropriate federal prosecutor, as circumstances warrant and as requested by 
the prosecutor. When, during such an investigation, a matter appears arguably to warrant 
‘Prosecution, the FBI employee must present the relevant facts to the appropriate federal 
prosecutor. Information on investigations that have been closed must be available on request 
to a United States Attorney or his or her. designee or an appropriate Department of Justice 
official. (AGG-Dom, Part VI.C) . 


. (U) Criminal Matters Outside FBI Jurisdiction 


(U//FOUO) When credible information is received by an FBI employee.concerning serious 
criminal activity not within the FBI’s investigative jurisdiction, the FBI employee must 
promptly transmit the information or refer the complainant to a-law enforcement agency 
having jurisdiction, except where disclosure would jeopardize an ongoing investigation, 
endanger the safety of an individual, disclose the identity of a CHS, interfere with the 
cooperation of a CHS, or reveal legally privileged information. If full disclosure is not made 
for the reasons indicated, then, whenever feasible, the FBI employee must make at least 
limited disclosure to a law enforcement agency or agencies having jurisdiction, and full 
disclosure must be made as soon as the need for restricting disclosure is no longer present. 
Where full disclosure is not made to the appropriate law enforcement agencies within 180 
days, the FB] employee/Field Office must promptly notify FBIHQ in writing of the facts and 
circumstances concerning the criminal activity. The FBI must make periodic reports.to the 
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Deputy Attorney General on such non-disclosures and incomplete disclosures, in a form 
suitable to protect the identity of a CHS. (AGG-Dom, Part VI.C) 


C. (U) Reporting of Criminal Activity 


(U//FOUO) When it appears that an FBI employee has engaged-in criminal activity in the 
course of an investigation under the AGG-Dom, the FBI must notify the USAO or an 
appropriate DOJ Division. When it appears that a CHS has engaged in criminal activity in the 
course of an investigation under the AGG-Dom, the FBI must.proceed as provided in the 
AGG-CHS. When information concerning possible criminal activity by any other person 
appears in the course of an investigation under the AGG-Dom, the FBI must initiate an 
investigation of the criminal activity if warranted. (AGG-Donm, Part VLC.3) 


(U//FOUO) The reporting requirements under this Paragraph ‘relating to criminal activity by 
an FBI employee or a CHS do not apply to otherwise illegal activity that is authorized in 
conformity with the AGG-Dom or other Attorney General guidelines or to minor traffic 
offenses. (AGG-Dom, Part VI.C.3) 


14.5. (U) Information Related to National Security and Foreign Intelligence Matters 
(U//FOUO) All information sharing with a foreign government related to classified national 


security and-foreign intelligerice-must-adheré to the FBI Foreig n Dissemination Manual éffective 
05/23/2008 and effective policies ‘governing MOUs. 


(U/FOUO).The general principle reflected in current law and policy is that there is a. 
résponsibility to provide information as consistently and fully as possible to.agencies with 
relevant responsibilities to protect the United States-and its people from terrorism.and other 
threats to the national security, except as limited by specific constraints on such sharing. The 
FBI’s responsibility in this area includes carrying. out the requirements of the MOU Between the 
Intelligence Community, Federal Law Enforcement Agenciés, and the Department of Homeland, 
Security Concerning Information Sharing (March 4, 2003), or any successor memorandum.of 
understanding or-agreement. Specific requirements also exist for internal coordination and 
consultation with other DOJ components, and for sharing national security and foreign 
‘intelligence information with White House agencies, as provided in the ensuing paragraphs. 
(AGG-Dom, Part VID) - 


. (U) Department of Justice 


A. (U//FOUO) The DOJ NSD must have accéss to all information obtained by the FBI through 
activities relating to threats to the national security or foreign intelligence. The Director of 
the FBI and the Assistant Attorney General for National’Security must consult concerning 
these activities whenever requested by either of them, and the FBI must provide such reports 
and information concerning these activities as the Assistant Attorney General for National 
Security may réquest. In addition to any reports or-information the Assistant Attorney 
General for National Security may specially request under this subparagraph, the FBI.must 
provide annual reports to the NSD concerning its foreign intelligence collection program, ` 
including information concerning the scope and nature of foreign intelligence collection 
activities in each FBI Field Office. (AGG-Dom, Part VI.D.1) 


B. (U//FOUO) The FBI must keep the NSD apprised of all information obtained through 


activities under the AGG-Dom that is necessary to the ability of the United ‘States to 
investigate or protect against threats to the national security, that includes regular 
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consultations between the FBI and the NSD to exchange advice and information relevant to 
addressing such threats through criminal prosecution or other means. (AGG-Dom, Part 
VLD.1) 


C. (U//FOUO) Except for counterintelligence investigations, a relevant USAO must have access 
to and must receive information from the FBI relating to threats to the national security, and 
may engage in consultations with the FBI relating to such threats, to the same extent as the 
NSD. The relevant USAO must receive such access and information from the FBI Field: 
Offices. (AGG-Dom, Part VLD.1) 


D. (U//FOUO) Ina counterintelligence investigation — e.g., an investigation relating to a matter 
described in Part VII.S.2 of the AGG-Dom — the FBI’s providing information to and 
consultation with a relevant USAO is subject to authorization by the NSD. In consultation 
with the Executive Office for United States Attorneys and the FBI, the NSD must establish 
policies setting forth circumstances in which the FBI will consult with.the NSD prior to 
informing a relevant USAO about such an investigation. The policies established by the NSD 
must (among other things) provide that: 


1. (U//FOUO) The NSD will, within 30 days, authorize the FBI to share with the USAO 
information relating to certain espionage investigations, as defined by the.policies, unless 
such information is'withheld-because of substantial natiorial Security considerations; and 

2. (U//FOUO) The FBI may consult freely with the USAO concerning investigations within 
the scope of this subparagraph during an emergency, so long as the NSD is notified of 
such consultation as soon as practicable after the consultation. (AGG-Dom, Part VI.D.1) 


E. (U//FOUO) Information shared with a USAO pursuant to DIOG subparagraph 14.5 (National 
Security) must be disclosed only to the United States Attorney or any AUSA designated by 
the United States Attorney as points of contact to receive such information. The United 
States Attorney and designated AUSA must have an appropriate security clearance and-must 
receive training in the handling of classified information and information derived from FISA, 
including training concerning the secure handling and storage of such information and 
training concerning requirements and limitations relating to the use, retention, and 
dissemination of such information. (AGG-Dom, Part VI.D.1) 


F. (U//FOUO) The disclosure and sharing of information by the FBI under this paragraph is 
Subject to any limitations required in orders issued by the FISC, controls imposed by the 
originators of sensitive material, and restrictions established by the Attorney General or-the 
Deputy Attorney General in particular cases. The disclosure arid sharing of information by 
the FBI-under this paragraph that may disclose the identity of a CHS is governed by the 
relevant provisions of the AGG-CHS. (AGG-Dom, Part VI.D.1) 


(U) White House 


(U//FOUO) In order to Carry. out their responsibilities, the President, the Vice President, the 
Assistant to the President for National Security Affairs, the Assistant to the President for 
Homeland Security Affairs, the National Security Council (NSC) and its staff; the Homeland 
Security Council (HSC) and its staff, and other White House officials and offices require 
information from all federal agencies, including foreign intelligence, and information relating to 
` international terrorism and other threats to the national security. The FBI accordingly may 
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disseminate to the White House foreign intelligence and national security information obtained 
through activities under the AGG-Dom, subject to the following standards and procedures. 


A. (U//FOUO) White House must request such information through the NSC staff or HSC staff 
including, but not limited to, the NSC Legal and Intelligence Directorates and Office of 
Combating Terrorism, or through the President’s Intelligence Advisory Board or the Counsel 
to the President. (AGG-Dom, Part VI.D.2.a) : 


(U//FOUO) If the White House sends-a request for such information to the FBI without first 


sending the request through the entities described above, the request must be returned to the 
White House for resubmission. 


B. (U//FOUO) Compromising information concerning domestic officials or political ; 

` organizations, or information concerning.activities of United States persons intended to affect 
the political process in the United States, may be disseminated to the White House only with 
the approval of the Attorney General, based on a determination that such dissemination is 
needed for foreign intelligence purposes, for the purpose of. protecting against international 
terrorism or other threats to the national security, or for the.conduct of foreign affairs. 
However, such approval is not required for dissemination-to the White House of information. 
concerning efforts of foreign intelligence services to penetrate the White House, or 
concerning contacts by White House personnel with foreign intelligence service personnel. 
(AGG-Dom, Part VI.D.2.b) l 


C. (U//FOUO) Examples of types of information that are suitable for dissemination to the White 
House on a routine-basis include, but are not limited to (AGG-Dom, Part VI.D.2.c): 


1. (U//FOUO) Information concerning international terrorism; 


2. (U//FOUO) Information concerning activities of foreign intelligence services in the 
United States; . 


3. (U//FOUO) Information indicative of imminent hostilities involvirig any foreign power; 

4. (U//FOUO) Information concerning potential cyber threats to the United States-or its 
allies; 

5. (U//FOUO) Information indicative of policy positions adopted by foreign officials, . 
governments, or powers, or their reactions to United States foreign policy initiatives; 


6. (U//FOUO) Information relating to possible changes in leadership positions of foreign 
governments, parties, factions, or powers; l 


7. (U//FOUO) Information concerning foreign economic or foreign political matters that 
might have national security ramifications; and 


8. (U//FOUO) Information set forth in regularly published national intelligence 
requirements. Í 


D. (U/FOUO) Communications.by the FBI to the White House that relate to a national security 
matter.and concern a litigation issue for a specific pending case must be made known to the 
Office of the Attorney General, the Office of the Deputy. Attorney General, or the Office of 
the Associate Attorney General. White House policy may limit or prescribe the White House 
personnel who may request information concerning such issues from the FBI. (AGG-Dom 
Part VI.D.2.d) 
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E. (U//FOUO) The limitations on dissemination of information by the FBI to the White House 
under the AGG-Dom do not apply to dissemination to the White House of information 
acquired in the course of an FBI investigation requested by the White House into the 
background of a potential employee or appointee, or responses to requests from the White 
House under E.O. 10450 relating tò security requirements for government employment, 
(AGG-Dom, Part VI.D.2.e) i 


14.6. (U) Special Statutory Requirements 


A. (U) Dissemination of information acquired under the FISA is, to the extent provided.in that 








Act, subject to minimization procedures and other requirements specified in that Act. (AGG- 
Dom, Part VI.D.3.a) 


- (U) Information obtained through the use of NSLs under 15 U.S.C. § 1681v (NSLs to obtain 
full credit reports}'may be disseminated in conformity with the general standards of AGG- 
Dom, Part VI, and DIOG Section 1 1.9.3.G. Information.obtained through the use of NSLs 
under other statutes may be disseminated in conformity with the general standards of the 
AGG-Dom, Part VI, subject to any applicable limitations in their governing statutory 
provisions (see DIOG Section 11.9.3.G): 12 U.S.C. § 3414(a)(5)(B); 15 U.S.C. § 1681u(f); 
18 U.S.C. § 2709(d); 50 U.S.C. § 436(e). (AGG-Dom, Part VI.D.3.b) 
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15, (U) Intelligence Analysis and Planning 


15.1. (U) Overview 


- (U//FOUO) The AGG-Dom provide specific guidance and authorization for intelligence analysis 
and planning. This authority enables the FBI to identify and understand trends, causes, and 
potential indicia of criminal activity and other threats to the United States that would:not be 

- apparent from the investigation of discrete matters alone. By means of intelligence analysis and 
planning, the FBI can more effectively discover criminal threats, threats to the national security, 
and other matters of national. intelligence interest, and can provide the critical support needed for 
the effective discharge of its investigative responsibilities and other authorized activities. (AGG- 
Dom, Part IV) 3 


(U/FOUO) In carrying out its intelligence functions under Part [V of the AGG-Dom, the FBI is 
authorized to collect information using all assessment investigative methods authorized in Part I 
of the AGG-Dom as described in the DIOG Section 5 







b2 
b7E 





Investigative activities under the AGG-Dom and other legally authorized activities through 
which the FBI acquires information, data, or intelligence may properly be utilized, structured, 
and prioritized to support and effectuate the FBI’s intelligence mission. (AGG-Dom, Part 
II.A.3.d and Part IV, Intro.) 


(U//FOUO) Note: In the DIOG, ‘the word “assessment” has two distinct meanings. The AGG- 
Dom authorizes as an investigative activity an “assessment,” which requires an authorized 
purpose as-discussed in Section 5. The USIC, however, also uses the word “assessmient” to 
describe written intelligence products, as discussed in Section 15.7.B. 


15.2. (U) Purpose and Scope 


A. (U//FOUO) Functions Authorized: The AGG-Dom authorizes the FBI to engage in 
intelligence analysis and planning to facilitate and support investigative activities and other 
authorized activities. The functions authorized ‘include: 





1. (U//FOUO) Development of overviews and analyses concerning threats to and 
vulnerabilities of the United States and its interests, such as domain management as 
related to the FBI’s responsibilities; 


2. (U//FOUO) Research and analysis to produce reports and assessments (analytical 


products) concerning matters derived from or relevant to investigative activities or other 
authorized FBI activities; and 


3. (U//FOUO) The operation of intelligerice and information systems that facilitate and 
support investigations and analysis through the compilation and analysis of data and 
information of an ongoing basis. (AGG-Dom, Introduction B) 


B. (U//FOUO) Integration of Intelligence Activities: In order to protect against national 
security and criminal threats through intelligence-driven operations, the FBI should integrate 
intelligence activities into all investigative efforts by: 
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1. (U//FOUO) Systematically assessing particular geographic areas or sectors to identify 
potential threats, vulnerabilities, gaps, and collection opportunities in.response to FBI 
collectiori requirements that support the broad range of FBI responsibilities: 


2. (U//FOUO) Pro-actively directing resources to collect against potential threats and other 
‘matters of interest to the nation and the FBI, and developing new collection capabilities 
where needed; . 


3. (U//FOUO) Continuously validating collection capabilities to ensure information 
integrity; 


4. (U//FOUO) Deliberately gathering information in response to articulated priority 
intelligence requirements using all available collection resources, then expeditiously 
preparing the collected information -for analysis and dissemination and promptly 
disseminating it to ‘appropriate partners at the local, state, national and foreign level; and 


5. (U//FOUO) Purposefully evaluating the implications. of collected information on current 
and emerging threat issues. 5 


C. (U//FOŬO) Analysis and Planning not Requiring the Initiation of an AGG-Dom Part II 
Assessment, (see DIOG Section 5): 







As part of'such analysis, an FBI employee can analyze historical information already. 
contained within: (i) FBI data systems: (ii USIC systems to which the FBI employee has 
access (e.g., ; (iii) any other United States Government data 
system to which the FBI employee has access; and (iv) the FBI employee can also conduct 
open-source Internet searches. Open-source Internet searches do not include any paid-for: 
service databases such as Lexis-Nexis and Choicepoint 










15.3. (U) Civil Liberties and Privacy 


(U) The‘FBI must collect intelligence critical-to the FBI’s ability to carry out its intelligence and 
law enforcement mission. While conducting intelligence analysis and planning, the FBI will 
conduct.its activities in compliance with the Constitution, federal laws, the AGG-Dom and other | 
relevant authorities in order to protect civil liberties and privacy. 


15.4. (U) Legal Authority 


(U) The FBI is an intelligence agency as well as a law enforcement agency. Accordingly, its 
basic. functions extend. beyond limited investigations of discrete matters, and include broader 
analytic and planning functions. The FBI’s responsibilities in this area derive from various 
administrative and statutory sources. See, e.g., E.O. 12333 § 1.7(g);28'U.S.C. §§ 532 note 
(incorporating P.L. 108-458 §§ 2001-2003) and:534 note (incorporating P.L. 109-162 § 1107). 


(U//FOUO) The scope of authorized activities urider Part II of the AGG-Dom is not limited to 
“investigation” in a narrow sense, such as solving particular cases or obtaining evidence for use 
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in particular criminal prosecutions. Rather, the investigative activities authorized under the 
AGG-Dom may be properly used to provide critical information needed for broader analytic and 
intelligence purposes to facilitate the solution and prevention of crime, protect the national 
Security, and further foreign intelligence objectives. These purposes include use of the 
information in intelligence analysis and planning under AGG-Dom, Part IV, and dissemination 
of the information to other law enforcement, USIC, and White House agencies under AGG-Dom, 
Part VI. Accordingly, informnation obtained at all Stages of investigative activity is to-be retained 
‘and disseminated. for these purposes as provided in the AGG-Dom, or in FBI policy consistent 
with the AGG-Dom, regardless of whether it furthers investigative objectives in a narrower or 

- more immediate sense. (AGG-Dom, Part II) 


15.5. (U//FOUO) Standards for Initiating or Approving Intelligence Analysis and 
Planning ` 


(U//FQUO) If an FBI employee wishes to engage in Intelligence Analysis and Planning that 

requires the collection or examination of information not available: (i) through an open-sotirce 

Internet search; (ii) in the FBI’s existing files; (iii) in thé USIC data systems to which the FBI 

employee has access; or (iv) in any other United States Government data system to which the 

FBI employee has acces; an assessment must be initiated. An FBI employee or. approving official. 

‘must detérmine that: ae 

A. (U//FOUO) An authorized purpose and objective exists for the conduct of an assessment (e.g., 
information is needed in order to conduct appropriate intelligence analysis and planning); 


B. (U//FOUO) The assessment is based on factors other'than the exercise of First Amendment 
activities or on the race, ethnicity, national origin or religion of the subject; and 


C. (U//FOUO) The assessment is an appropriate use of personnel and financial resources. 
15.6. (U//FOUO) Standards for Initiating or Approving the Use of an Authorized 


Investigative Method in Intelligence Analysis and Planning 


A. (U//FOUO).The use of the particular investigative method is likely to further an objective of 
the assessment; l 


B. (U//FOUO) The investigative method selected is the least intrusive method, reasonable under 
the circumstances; i 


C. (U//FOUO) If the assessment: relates to positive foreign intelligence, thé FBI must operate 
openly and corisensually with United States persons, to the extent practicable. 


D. (U//FOUO) The anticipated value of the assessment justifiés the use of the selected 
investigative method or methods; and 


E. (U//FOUO) The investigative method is an appropriate use ofpersonnel and financial 
resources, , 
13.7. (U) Authorized. Activities in Intelligence Analysis and Planning 


‘(U) The FBI may engage in intelligence analysis and planning to facilitate or support 
investigative activities authorized by the AGG-Dom or other legally authorized activities. - 
Activities the FBI may carry out.as part of Intelligence Analysis and Planning include: 
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A. (U/FOQUO) Strategic Intelligence Analysis 





(U//FOUO) The FBI is authorized to develop overviews and analyses of threats to and 
vulnerabilities of the United States and its interests in areas related to the FBI’s 
responsibilities, including domestic and international criminal threats and activities; domestic 
and international activities, circumstances, and developments affecting the national security. 
FBI overviews and analyses may encompass present, emergent, and potential threats and 
vulnerabilities, their contexts and causes, and identification and analysis of means of 
responding to them. (AGG-Dom, Part IV) 


1. (U//FOUO) Domain Management by Field Offices 


(U//FOUO) As part of Strategic Analysis Planning activities, the FBI may collect 
information in order to.improve or facilitate “domain awareness” and may engage in 
“domain management.” “Domain management” is the systematic process by which the 
FBI develops cross-programmatic domain awareness and leverages its knowledge to 
enhance its ability to: (i) proactively identify threats, vulnerabilities, and intelligence gaps; 
(ti) discover.new opportunities.for needed intelligence collection and prosecution; and (iii) 
set tripwires to provide advance warning of national security and criminal threats. 
Effective domain managenient éfables the FBI to identify significant threats, detect 
vulnerabilities within its local and national domain, identify new sources and threat 
indicators, and recognize new trends so that resources can be appropriately allocated at 
the local level in accordance with national priorities. _ 


(U/FOUO) Through a properly authorized assessment, domain management is 

` undertaken at the local and national Jevels. All National Domain Assessments are _ 
initiated.and coordinated by the DI. Examples of domain-mana ement activities include, b2 
but are not limited to: census crime statistics, b7E 
case information, domain entities, trend analysis, source development, and placement of 


tripwires. Further guidance regardin domain management and examples of intelligence 
products are contained in the en AD 


(U//FOUO) The Field Office “domain” is the territory and issues for which a Field Office 
exercises responsibility, also known as the Field Office’s area-of-responsibility (AOR); 
Domain awareness is the: (i) strategic understanding of national security and criminal 
threats and vulnerabilities; (ii) FBI’s positioning to collect against these threats and 
vulnerabilities; and (iii) the existence of intelligence gaps related to the domain. 


U//FOUO) All information collected for domain management must be documented in an 
as directed in thé 





b2 | 
b7E 
J a separate substantive classification assessment file or 
subfile, according to the investigative matter, must be opened on the individual. 
FBIHQ DI provides specific guidance in its regarding, but b2 
not limited to: the initiation, opening, coordination.and purpose for Field Office and BUE 


National Domain Assessments. 
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2. (U/FOUO) Collection Management 
(U//E QUO) Collection Management is a formal business process through which 





Intelligence Information Needs and Intelligence Gaps (e.g., unknowns) are expresséd as 
Intelligence Collection Requirements (questions or statements requesting information) 
and prioritized in a comprehensive, dynamic Intelligence Collection Plan. Results are 
monitored, and collectors are re-tasked as required. 


(U) Written Intelligence Products 


(U//FOUO) The FBI is authorized to conduct research, analyze information, and prepare 
reports and intelligence assessments (analytical products) concerning matters relevant to 
authorized FBI activities, such.as: (i) reports and intelligence assessments (analytical product) 
concérning types of criminals or criminal activities; (ii) organized.crime groups, terrorism, 
espionage, or other threats to the national security; (iii) foreign intelligence matters; or (iv) 

the scope and nature of criminal activity in particular geographic areas or sectors of the 
economy. (AGG-Dom, Part IV) 


(U//FOUO) United States Person Information: Reports, Intelligence Assessments, and 
other FBI intelligence products should not contain United.States.person-information- - 
including the names.of United States corporations, if the pertinent intelligence can be 
conveyed without including identifying information. 


(U//FOUO) FBI intelligence products, both-raw and’ finished, serve a wide range of- 
audiences from national-level policy and decision-makers, intelligence agencies, and State, 
local and tribal law. enforcement agencies, 


(U//FOUO) Intelligence products prepared pursuant to this Section include, but are not 
limited to: Domain Management, Special Events Management Threat Assessments, 
Intelligence Assessments, Intelligence Bulletins, Intelligence Information Reports, WMD 
Scientific and Technical Assessments, and Regional Field Office Assessments. 


- (U) Intelligence Systems 


(U//FOUO) The FBI is authorized to operate intelligence, identification, tracking, and 
information systems in support of authorized investigative activities, or for such other or 
additional purposes as may be legally authorized, such as intelligence and tracking systems 
relating to terrorists, gangs, or organized crime groups. (AGG-Dom, Part IV ; 


(U/FOUO 
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(U//FOUO) When developing a new database, the FBI OGC Privacy and Civil Liberties Unit 
must be consulted to determine if a Privacy Impact Assessment (PIA) must be prepared. 


1,0. 
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16. (U) Undisclosed Participation (UDP) 


16.1. (U) Overview 


(U//FOUO) Undisclosed participation (UDP) takes place when anyone acting on behalf of the 
FBI, including but not limited to an. FBI employee or confidential human source (CHS), becomes 
a member or participates in the activity of an organization on behalf of the U.S. Government ` 
without disclosing FBI affiliation to an appropriate official of the organization. 


A. (U) Authorities. The FBI derives its authority to engage in UDP in organizations as part of 
its investigative and intelligence collection missions from two primary sources. 


(U) First, Executive Order (E.0.) 12333 broadly establishes policy for the United States 
Intelligence Community (U SIC). Executive Order 12333 requires the adoption of procedures 
for undisclosed participation in organizations on behalf of elements of the USIC within the 
United States. Specifically, the Order provides “.. . [n]o one acting on behalf of the 
Intelligence Community may join or otherwise participate in any organization in the United 
States on behalf of the-any element of the Intelligence Community without first disclosing 
such person’s intelligence affiliation to appropriate officials of the organization, except in 
accordance with procedures established by the:head of the Intelligence Community element 
concerned .... Such participation shall be authorized only if-it is essential to achieving lawful 
purposes as determined by the Intelligence Community element head.or designee.” (E.O. 
12333, Section 2.9, Undisclosed Participation in Organizations Within the United States). 
The Order also provides, at Section 2.2, that “[nJothing in [E.O. 12333] shall be construed to 


apply to or interfere with any authorized civil or-criminal law enforcement responsibility of 
any department or agency.” 


(U) Second, in addition to its: role as member of the USIC, the FBI is also the primary 


criminal investigative agency of the federal government with authority and responsibility to. 


investigate all violations of federal law that are not exclusively assigned to another federal 


agency. This includes the investigation of crimes involving international terrorism and 


espionage: As a criminal investigative agency, the FBI has the authority to engage in UDP as 
part of a predicated investigation or an assessment. 


(U//FOUO) The FBI’s UDP policy is designed to incorporate the. FBI’s responsibilities as 


both a member of the USIC and as the primary criminal investigative agency of the federal 


government and, therefore, applies to all investigative and information collection activities of 


the FBI. It is intended to provide uniformity and clarity so that FBI employees have one set 
of standards to govern all UDP: As is the case throughout the DIOG, however, somewhat 
different constraints exist if the purpose of the activity is the collection of positive foreign 


intelligence that falls outside the FBI’s law enforcement authority. Those constraints are 
reflected where applicable below. i 
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17. (U) Otherwise Ilegal Activity 


17.1. (U) Overview. 


(U//FOUO) Otherwise Illegal Activity (OIA) is conduct in the course of duties by an-FBI 

employee (to.include a UCE) or CHS which constitutes a crime under local, state, or federal law 

if engaged in by a person acting without authorization. Under limited circumstances,.OIA can be 
authorized for an FBI employee or CHS to obtain information or evidence necessary for the © p2 
success of an investigation under the following circumstances: (i) when that information or _ b7E 
evidence is not reasonably available ‘without participation in the OIA; 










when necessary to prevent serious-bodily injury or death. Certain types of OIA are not authorized 
such as participation in an act of violence, except in self-defense, or participation in conduct that 
would constitute an unlawful investigative technique such an illegal wiretap. 


17.2. (U) Purpose and Scope 


(U//FOUO).The-use of OIA may be approved inthe course of undercover activities or operations 
that involve an FBI employee or that involve use of a CHS. When approved, OIA should -be ` 
limited or minimized in scope to only that which is reasonably necessary under the 
circumstances including the duration and geographic area to which approval applies, if 
appropriate. 


17.3.. (U//FOUO) OFA in Undercover Activity 


A. (U//FOUO) General. The use of the undercover method i is discussed in the DIOG Section 
_L1.8. OIA is often proposed as part of an.undercover scenario or in making the initial 
undercover contacts before the operation is approved. Spécific approval for OIA must be 
obtained in the context of these undercover activities or operations in addition to general 
approval of ‘the scenario or the operation. 





B. (U//FOUO) OIA by an FBI employee in-an undercover operation relating to activity in 
violation of federal criminal law that does not concern a threat to the national security 
or foreign intelligence: must be approved in conformity with the AGG-UCO. Approval of 
OIA in conformity with the AGG-UCO is sufficient and satisfies any approval requirement 
that would otherwise apply under the AGG-Dom. Additional discussion is provided in the: 
Field Guide for FBI Undercover and Sensitive Operations. An SAC may approve the OIA 
described in subsection 17.5. i 


1. (U//FOUO) When a:UCE provides goods and service (reasonably unavailable to the 
subject except as provided by the United States government) that facilitate a felony, or its 
equivalent under federal, state, or local law, it is a sensitive circumstance. In these 
sensitive circumstances, additiorial authorization-by an Assistant Director is required after’ 
review by the Criminal Undercover Operations Review Committee (CUORC). 


2. (U//FOUO) Participation in otherwise illegal activity that involves a significant risk of 
violence or physical injury requires authorization by the Director, Deputy Director, or 
designated Executive Assistant Director after review by the CUORC. 

C. (U//FQUO) OFA by an FBI employee in an undercover operation relating to a threat to 
the national security or foreign intelligence collection must conform to the AGG-Dom. 


256 
UNCLASSIFIED-FOR OFFICIAL USE ONLY 





UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


The DOJ NSD is the approving component for OIA that requires approval beyond that 
authorized for SAC approval described in DIOG subsection 17.5, below. However, as 
authorized by the Assistant Attorney General for NSD, officials in other DOJ components 
may approve OIA in such investigations. 


17.4. (U//FOUO) OIA for a Confidential Human Source 


(U//FOUO) OJA by a CHS must be approved in conformity with the AGG-CHS and the FBI 
CHSPM. 


17.5. (U//FOUO) Approval of OIA by a Special Agent in Charge 


(U//FOUO) An SAC may authorize the following OIA for an FBI employee when consistent 
with other requirements of this section, the AGG-UCO, and other FBI-policy:. 


A. 


B. 


(U//FOUO) Otherwise illegal activity that would not be a felony under federal, state, local, or 
tribal law; s 


(U//FOUO) Consėnsual monitoring of communications, even r a crime under state, local, or 
tribal law; 


(U//FOUO) Note: Other sonora for the consensual monitoring may apply suchas that - 
required when the consensual monitoring involves a sensitive monitoring circumstance. See 
DIOG Section 11.5.4. 


(U//FOUO) Note: For those state, local and tribal governments that do not sanction or 
provide a law enforcement exception available to the FBI for one-party consent recording of 
communications with persons within their jurisdiction, the SAC must approve the consensual 


- monitoring of communications as an OJA. Prior to the SAC authorizing the OJA, one-party 


E. 


F. 


consent must be acquired. The SAC may delegate the OIA approval authority to an ASAC or 
SSA. 


. (U//FOUCO) The controlled purchase, receipt, delivery, or sale of drugs, stolen property, or 


other contraband; 


. (U//FOUO) The payment of bribes; 


(U//FOUO) Note: the payment of bribes and thé amount of such bribes in a public corruption 
matter may be limited by other FBI policy; see the CID PG. 


(U//FOUO) The making of false representations in concealment of personal identity or the 
true ownership of a proprietary; and 


(U//FOUO) Conducting a money laundering transaction or transactions involving an 
aggregate amount not exceéding $1 million. 


(U//FOUO) Exception: An SAC may not-authorize an activity that may constitute material 
support to terrorism, a violation of export control laws, or a violation of laws that‘concern. 
proliferation of weapons of mass destruction. In such an investigation, an SAC may authorize an 
activity that may otherwise violate prohibitions of material support to terrorism only according to 

standards established by the Director of the FBI and agreed to by the Assistant Attorney General 
for National Security. (AGG-Dom, Part V.C.3) 
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17.6. (U//FOUO) Standards for Review and Approval of OIA 


.CU//FOUO) No official may recommend or approve participation by an FBI TRENERI in OIA 
unless the participation is justified: 


A. (U//FOUO) To obtain information or evidence necessary fa the success of the investigation 
and not reasonably available without participation in the otherwise illegal activity; 


somo  — idea 
C. (U//FOUO) To prevent death or serious bodily injury. 

17.7. (U/FOUO) OIA not authorized 
(U//FOUO) The following activities may not be authorized for an FBI employee: 





A. (U//FOUO) Directing or participating in acts of violence; 


(U//FOUO) Note: Self-defense and defense of others. FBI employees are authorized to 
engage in any lawful use of forcè, including the use of force in self-defense or defense of 
others in the lawful discharge of their duties. 


B: (U//FOUO) Activities- whose authorization-is prohibited-by law, including unlawful 
investigative methods, such as ee non-consensual, electronic surveillance or illegal 
searches. 


(U//FOUO) Note: Subparagraph B includes activities that would violate protected 
constitutional or federal statutory rights in the. absence of a court order or warrant such as 
illegal wiretaps and searches. 


17.8. (U//FOUO) Emergency Situations 


(U//FOUO) Without prior approval, an FBI employee may engage in OIA that could be 

a authorized under this section only if necessary to meet an immediate threat to the safety of 
persons or property or to the national security, or to prevent the compromise of an investigation 
or the loss of a significant investigative opportunity. In such a case, prior to engaging in the OIA, 
every effort should be made by the-FBI employee to consult with the SAC, and by the SAC to 
consult with the USAO or appropriate DOJ Division where the authorization of that office or 
Division would be required unless the circumstances preclude such consultation. Cases in which 
OIA occur pursuant to this paragraph without the authorization required must be reported as soon 
as possible to the SAC, and by the SAC to FBIHQ and to the USAO or appropriate DOJ 
Division. 
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PREAMBLE 


These Guidelines are issued under the authority of the Attorney General as provided in 
sections 509, 510, 533, and 534 of title 28, United States Code, and Executive Order 12333. 
They apply to domestic investigative activities of the F ederal Bureau of unyetieeeon (FBD and. 
other activities as provided herein. 
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INTRODUCTION 


As the primary investigative agency of the federal government, the Federal Bureau of 
Investigation (FB) has the authority and responsibility to investigate all violations of federal law 
that are not exclusively assigned to another federal agency. The FBI is further vested by law and 
by Presidential directives with the primary role in carrying out investigations within the United 
States of thréats to the national security. This includés.the lead domestic role in investigating 
international terrorist threats to the United States, and in. conducting counterintelligence activities 
to meet foreign entities’ espionage and intelligence efforts directed against the United States. 
The FBI is also vested with important functions in collecting foreign intelligence as a member 
agency of the U.S. Intelligence Community. The FBI accordingly plays crucial roles in the 
enforcement of federal law and the proper administration of justice in the United States, in the 
protection of the national security, and in obtaining information needed by the United States for 
the conduct of its foreign affairs. These roles reflect the wide range of the FBI’s current 
responsibilities and obligations, which require the FBI to be both an agency that effectively 
detects, investigates, and prevents crimes, and an agericy that effectively protects the national 
security and collects intelligence. 


The general objective of these Guidelines is the full utilization of all authorities and 
investigative methods, consistent with the Constitution and laws of the United States, to protect 
the United States and its people from terrorism and other threats to the national security, to 
protect the United States and its people from Victimization by all crimes in Violation of federal 
law, and to further the foreign intelligence objectives of the United States. At the-same time, it is 
axiomatic that the FBI must condúct its investigations and other activities in a lawful and ` , 
reasonable manner that respects liberty and-privacy and avoids unnecessary intrusions into the 
lives of law-abiding people. The purpose of these Guidelines, therefore, is to establish consistent: 
policy in such matters. They will enable the FBI to perform its duties with effectiveness, 
certainty, and confidence, and will provide the American people with a firm assurance that the 
FBI is acting properly under the law. 


The issuance of these Guidelines représents the culmination of the historical evolution of 
the FBI and the policies governing its domestic operations subsequent to the September 11, 2001, 
terrorist attacks,on the United States. Reflecting decisions and directives of the President and the 
Attomey General, inquiries and enactments of Congress, and the conclusions of national 
commissions, it was recognized that the FBI’s functions needed to be expanded and better 


integrated to meet contemporary realities: 


[C]ontinuing coordination . . . is necessary to optimize the FBI’s performance in: 

both national security and criminal investigations... . [The] new reality requires-first 
that the FBI and other agencies do.a better job of gathering intelligence inside the United’ 
States, and second that we eliminate the remnants of the old “wall” between foreign 
intelligence and domestic law enforcement. Both tasks must be accomplished without 
sacrificing our:domestic liberties and thé rule of law, and both depend on building a-very 

















different FBI from the one we had on September 10, 2001. (Report of the Commission 
on the Intelligence Capabilities of the United States Regarding Weapons of Mass 
Destruction 466, 452 (2005).) 


In line with these objectives, the FBI has reorganized and reoriented its programs and 
missions, and the guidelines issued by the Attorney General for FBI operations have been 
extensively revised over the past several years. Nevertheless, the principal directives of the 
Attomey General governing the FBI’s conduct of criminal investigations, national security -- 
investigations, and foreign intelligence collection have persisted as separate documents:involving- 
different standards and procedures for comparable activities. These Guidelines effect a more 
complete integration and harmonization of standards, thereby providing the FBI and other 
affected Justice Department components with clearer, more consistent, and more accessible - 
guidance for their activities, and making available to the public in a single document the basic 
body of rules for the FBI’s domestic operations. 


These Guidelines also incorporate effective oversight measures involving many 
Department of Justice and FBI components, which have been adopted to ensure that all FBI 


activities are coriducted in a manner consistent with law and policy: 


The broad operational areas addressed by these Guidelinés are the FBI’s conduct.of 
investigative and intelligence gathering activities, including cooperation and coordination with 
other components and agencies in’such activities, and the intelligence analysis and planning 
functions of the FBI. ' 


A. FBI RESPONSIBILITIES — FEDERAL CRIMES, THREATS TO THE 
- NATIONAL SECURITY, FOREIGN INTELLIGENCE 


Part I of these Guidelines authorizes the FBI to carry out investigations to detect, obtain 
information about, or prevent or protect against federal crimes or threats to the national security 
or to collect foreign intelligence. The major subject areas of information gathering activities 
under these Guidelines — federal crimes, threats to the national security, and foreign intelligence 
~ are not distinct, but rather overlap extensively. For example, an investigation relating to 
international terrorism will invariably crosscut these areas because international terrorism is 
. included under these Guidelines’ definition of “threat to the national security,” because 
intérnational terrorism subject to investigation within the United States usually involves criminal 
acts that violate federal law, and because information relating to international terrorism also falls 
within the definition of “foreign intelligence.” Likewise, counterintelligence activities relating to- 
espionage are likely to concern matters that constitute threats to the national security, that 
implicate violations or potential violations of federal espionage laws, and that involve 
information falling under the definition of “foreign intelligence.” 


While some distinctions in the requirements and procedures for investigations ate 
necessary in different subject areas, the general design of these Guidelines is to take a uniform 








approach wherever possible, thereby promoting certainty and consistency regarding the 
applicable standards and facilitating compliance with those standards. Hence, these Guidelines 
do not require that-the FBI’s.information gathering activities be differentially labeled as “criminal 
investigations,” “national security investigations,” or “foreign intelligence collections,” or that 
the categories of FBI personnel who carry out investigations be segregated from each other based 
on the subject areas in which they operate. Rather, all of the FBI’s legal authorities are available 
for deployment in all cases to which they apply to protect the public from crimes and threats to 
the national security and to further the United States’. foreign intelligence objectives. In many 
cases, a single investigation will be supportable as an exercise of a number of these authorities — 
i.e., as an investigation of a federal crime or crimes, as an investigation of a threat to the national 
security, and/or as a collection of foreign intelligence. > 


1. Federal Crimes 


The FBI has the authority to investigate all federal crimes that are not exclusively 
assigned to other agencies. In most ordinary criminal investigations, the immediate objectives 
include such matters as: determining whether a federal crime has occurred or is occurring, or if 

' Planning or préparation for such a crime is taking place; identifying, locating, and apprehending 
the perpetrators; and obtaining the evidence needed for prosecution. Hence, close cooperation 
and coordination with federal prosecutors in the United States Attorneys’ Offices and the Justice 
Department litigating divisions are essential both to ensure that agents have the investigative 
tools and legal advice at their disposal for which prosecutorial assistance or approval is needed, 
and to ensure that investigations are conducted in a manner that will lead to'successful i 
prosecution. Provisions in many parts of these Guidelines establish procedures.and requirements 
for such coordination. 


2. Threats to the National Security 


The FBI’s authority to investigate threats to the national security derives from the. 
executive order. concerning U.S. intelligence activities, from delegations of functions by the 
Attorney General, and from various statutory sources.. See, €.g., E.O. 12333; 50 U.S.C. 401 et 
seq.; 50 U.S.C. 1801 et seq. These Guidelines (Part VIS) specifically define threats to the 
national security to mean: international terrorism;. espionage and other intelligence activities, 
sabotage, and assassination, conducted by, for, or on behalf of foreign powers, organizations, or 
persons; foreign computer intrusion; and other matters determined by the Attorney General, 
consistent with Executive Order 12333 or any successor order. s 


_ Activities within the.definition of “threat to the national security” that are subject to 
investigation under these Guidelines commonly involve violations (or potential violations) of - 
federal criminal laws. Hence, investigations of such threats may constitute an exercise both of 
the FBI’s criminal investigation authority and of the FBI’s authority to investigate threats to the 
national security. As with criminal investigations generally, detecting and solving the crimes, 
and eventually arresting and prosecuting the perpetrators, are likely to be among the objectives of 
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investigations relating to threats to the national security. But these investigations also often-serve 
important purposes outside the ambit of normal criminal investigation and prosecution, by 
providing the basis for, and informing decisions concerning, other measures needed to protect.the. 
national security. These measures may include, for example: excluding or removing persons 
involved in terrorism or espionage from the United States; recruitment of double agents; freezing 
assets of organizations that engage in or support terrorism; securing targets of terrorism or 
espionage; providing threat information and warnings to other federal, state, local, and private. 

` agencies and entities; diplomatic or military actions; and actions by other intelligence agencies to 
counter international terrorism or other national security threats. : 












In line with this broad range of purposes, investigations of threats to the national security 
present special needs to coordinate with other Justice Department components, including 
particularly the Justice Department’s National Security Division, and to share information and 

_ cooperate with other agencies with national security responsibilities, including other agencies of 
the U.S. Intelligence Community, the Department of Homeland Security, and relevant White 
House (including National Security Council and Homéland Security Council) agencies and 
entities. ‘Various provisions in these Guidelines establish procedures and requirements to 
facilitate such coordination. 7 










3. Foreign Intelligence 





As with the investigation of threats to the national security, the FBI’s authority to collect 
foreign intelligence derives from a mixture of administrative and statutory sources. See, e.g., 
E.O. 12333; 50 U.S.C. 401 et seq.;:50 U.S.C. 1801 et seq.; 28 U.S.C. 532 note (incorporating 
- P.L, 108-458 §§ 2001-2003). These Guidelines (Part VILE) define foreign intelligence to mean 
“information relating to the capabilities, intentions, or activities of foreign governments or 
elements thereof, foreign organizations or foreign persons, or international terrorists.” 









The FBI’s foreign intelligence collection activities have been expandéd by legislative and 
administrative reforms subsequent to the September 11, 2001, terrorist attacks, reflecting the 
FBI’s role as the primary collector of foreign intelligence within the United States, and the 
recognized imperative that the United States’ foreign intelligence collection activities become 
more flexible, more proactive, and more efficient in order to protect the homeland and adequately 
inform the United States’ crucial decisions in its dealings with the rest of the world: 












The. collection of information is the foundation of everything that the Intelligence 
Community does. While successful collection cannot ensure a good analytical product, 
the failure to collect information . . . tums analysis into guesswork. . And as our review 
demonstrates, the Intelligence Community’s human and technical intelligence collection 
agencies have collected far too little information on many of the issues we care about 
most. (Report of the Commission on the Intelligence Capabilities of the United States 
Regarding Weapons of Mass Destruction 351 (2005).) 


These Guidelines accordingly provide standards and procedures for the FBI’s foreign intelligence 
collection activities that meet current needs and realities and optimize the FBI’s ability to 
discharge its-foreign intelligence collection functions. > 


The authority to collect foreign intelligence extends the sphere of the FBI’s information 
gathering activities beyond federal crimes and threats to the national security, and permits the 
FBI to seek information regarding a broader range of matters relating to foreign powers, 
organizations, or persons that may be of interest to the conduct of the United States’ foreign 
affairs. The FBI’s role is central to the effective collection of foreign intelligence within the. 
United States because the authorized domestic activities of other intelligence agencies are more 
constrained than those of the FBI under applicable statutes and Executive Order 12333. In 
collecting foreign intelligence, the FBI will generally be guided by nationally-determined 
intelligence requirements, including the National Intelligence Priorities Framework and the 
National HUMINT Collection Directives, or any successor directives issued under the authority. 
of the Director of National Intelligence (DND). As provided in Part VILF of these Guidelines, 
foreign intelligence requirements may also be established by the President or Intelligence 
Community officials designated by the President, and by the Attorney General, the Deputy 
Attomey General, or an official designated by the Attorney General: i 


The general guidance.of the FBI’s foreign intelligence collection activities by DNI- 
authorized requirements does not, however, limit the FBI’s authority to conduct investigations 
supportable on the basis of its other authorities — to investigate federal crimes and threats to the 
national security ~ in areas in which the information sought also falls-under the definition of 
foreign intelligence. The FBI conducts investigations of federal crimes and threats to the 
national security based on priorities and strategic objectives set by the Department of Justice and 
-the FBI, independent of DNI-established foreign intelligence collection requirements. 


Since the authority to collect foreign intelligence enables the FBI to obtain information 
pertinent to the United States’ conduct of its foreign affairs, even if that information is not related 
to criminal activity or threats to.the national security, the information so gathered may concern 
lawful activities. The FBI should accordingly operate openly and consensually with U.S. persons 
to the extent practicable when collecting foreign intelligence that does not concern criminal 
activities or threats to the national security. 


B. THE FBI AS AN INTELLIGENCE AGENCY 


The FBI is an intelligence agency as well as a law enforcement agency. Its basic 
functions accordingly extend beyond limited investigations of discrete matters, and include 
broader analytic and planning functions. The FBI’s responsibilities in this area derive from 
various administrative and Statutory sources. See, e.g., E.O. 12333; 28 U.S.C. 532 note 
(incorporating P.L. 108-458 §§ 2001-2003) and 534 note (incorporating P.L. 109-162 § 1107). 
Enhancement of the FBI’s intelligence analysis capabilities and functions has consistently been 
recognized as a key priority in the legislative and administrative reform efforts following the 





September 11, 2001, terrorist attacks: 


[Counterterrorism] strategy should . . . encompass specific efforts to . . . enhance the 

‘ depth and quality of domestic intelligence collection and analysis .... [T]he FBI should 
strengthen and improve its domestic [intelligence] capability as fully and expeditiously as 
possible by immediately instituting measures to . . . significantly improve strategic 
analytical capabilities... . (Joint Inquiry into Intelligence Community: Activities Before 
and After the Terrorist Attacks of September 11,.2001, S. Rep. No. 351 & H.R. Rep. No. 
792, 107th Cong., 2d Sess. 4-7 (2002) (errata print).) 


A “smart” government would integrate all sources of information to see the enemy as a 
whole, Integrated all-source analysis should also inform and shape strategies to collect 
more intelligence. ... The importance of integrated, all-source analysis cannot be 
overstated. Without it, it is not possible to “connect the dots.” (Final Report of the 
National Commission on Terrorist Attacks Upon the United States 401, 408 (2004).) 


Part IV of these Guidelines accordingly authorizes the FBI to engage in intelligence 

‘analysis and planning, drawing on-all lawful sources of information. The functions authorized: 

_ under that Part include: (i) development of overviews and analyses concerning threats to and 
vulnerabilities of the United States and its interests, (ji) research and analysis to produce reports 
and assessments concerning matters relevant to investigative activities or other authorized FBI 
activities, and (iii) the operation of intelligence systems that facilitate and support investigations 

_ through the compilation and analysis of data and information on an ongoing basis. 


C. OVERSIGHT 


The activities authorized by these Guidelines must be conducted in a manner consistent 
with all applicable laws, regulations, and policies, including those protecting privacy and civil 
liberties, ‘The Justice Department’s National Security Division and the FBI’s Inspection 
Division, Office of General Counsel, and Office of Integrity and Compliance, along with other 
components, share the Tesponsibility to ensure that the Department meets these goals with respect 
to national security arid foreign intelligence matters. In particular, the National Security 
Division’s Oversight Section, in conjunction with the FBI’s Office of General Counsel, is 
responsible for conducting regular reviews of all aspects of FBI national security and foreign 
intelligence activities. These reviews, conducted at FBI field offices and headquarter units,- 
broadly examine such activities for compliance with these Guidelines and other applicable 
requirements. i 

Various features of these Guidelines facilitate the National Security Division’s oversight 
functions. Relevant requirements and provisions include: (i) required notification by the FBI to 
the National Security Division concerming full investigations that involve foreign intelligence 
collection or investigation of United States persons in relation to threats of the national security, 
(ii) annual reports by the FBI to the National Security Division. concerning the FBI’s foreign 
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intelligence catleeaang program, including information on the scopé and nature of foreign 
intelligence collection activities in each FBI field office, and (iii) access by the National Security 
Division to information obtained by the FBI through national security or foreign intelligence 
activities and general authority for the Assistant Attorney General for ‘National Security to obtain 
reports from the FBI concerning these activities. 


Pursuant to these Guidelines, other Attorney General guidelines, and institutional 
assignments of responsibility within the Justice Department, additional Department components 
— including the Criminal Division, the United States Attorneys’ Offices, and the Office:of 
Privacy and Civil Liberties — are involved in the common endeavor with the FBI of ensuring that 
the activities of all Department components are lawful, appropriate, and ethical as well as 
effective. Examples include the involvement of both FBI and prosecutorial personnel in the 
review of undercover operations involving sensitive circumstances, notice requirements for 
investigations involving sensitive investi gative matters (as defined in Part VILN of these 
Guidelines), and notice and oversight provisions for enterprise investigations, which may involve 
a broad examination of groups implicated in the-gravest criminal and national security threats. 
These requirements and procedures help to ensure that the rule of law is respected in the 
Department’s activities and:that public confidence is maintained in these activities. 





GENERAL AUTHORITIES AND PRINCIPLES 


SCOPE 


These Guidelines apply to investigative activities conducted by the FBI within the United 
States or outside the territories of all countries. They do not apply to investigative 
activities of the FBI in foreign countries, which are governed by the Attorney General’s: 
Guidelinés for Extraterritorial FBI Operations. f 


GENERAL AUTHORITIES 


1. The FBI is authorized to conduct investigations to detect, obtain information 
about, and prevent and protect against federal crimes and threats to the national 
security and to collect foreign intelligence, as provided in Part I of these 
Guidelines. 


- The FBI is authorized to provide investigative assistance to other federal agencies, 
state; local, or tribal agencies; and foreign agencies: as-ptovided-in Part M of these- 
Guidelines. 


The FBI is authorized to conduct intelligence analysis and planning as provided in 
Part IV of these Guidelines. ' 


The FBI is authorized to retain and share information obtained pursuant to these 
Guidelines as provided in Part VL of these Guidelines. 


USE OF AUTHORITIES AND METHODS 
1. Protection of the United States and Its People 


The FBI shall fully utilize the authorities provided and the methods authorized by 
these Guidelines to protect the United:States and its people from crimes in 
violation of federal law and threats to the national security, and to further the 
foreign intelligence objectives of the United States, 


Choice of Methods 


a. ‘The conduct of investigations and other activities authorized by these 
Guidelines may present choices between the use of different investigative: 
methods that are each operationally sound and effective, but that ate-more 
or less intrusive, considering such factors as the effect on the privacy and 
civil liberties of individuals and potential damage to reputation. The least 
intrusive method feasible is to be'used in‘such situations. It is recognized, 
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however, that the choice of methods is a matter of judgment. The FBI 
shall not hesitate to use any lawful method consistent with these 
Guidelines, even if intrusive, where the degree of intrusiveness is 
warranted in light of the seriousness of a criminal or national security 
threat or the strength of the information indicating its existence, or in light 
of the importance of foreign intelligence sought to the United States’ 
interests. This point is to be particularly observed in investigations 
relating to terrorism. z : 








b. United States persons shall be dealt with openly and consensually to the 
. extent practicable when collecting foreign intelligence that does not 
concern criminal activities or threats to the national security. 







3. Respect for Legal Rights 






All activities under these Guidelines must have a valid purpose consistent with 
these Guidelines, and must be carried out in conformity with the Constitution ‘and 
all applicable statutes, executive orders, Department of Justice regulations and 
policies, and Attorney General guidelines. ‘These Guidelines do not authorize - 
investigating or collecting or maintaining information on United States persons. 
solely for the purpose of monitoring activities protected by the First Amendment 
or the lawful exercise of other rights secured by the Constitution or laws of the 
United States. These Guidelines also do not authorize any conduct prohibited by 
the Guidance Regarding the Use of Race by Federal Law Enforcement Agencies. 












4. Undisclosed Participation in Organizations 






Undisclosed participation in organizations in activities under these Guidelines 
shall be conducted in accordance with FBI policy approved by the Attorney 
General. i 






5 Maintenance of Records under the Privacy Act 






The Privacy Act restricts the maintenance of records relating to certain activities 
of individuals who are United-States persons, with exceptions for circumstances 
in which the collection of such information is pertinent to and within the scope of 
an authorized law enforcement activity or is otherwise authorized by statute. 5 
U.S.C, 552a(e)(7). Activities authorized by these Guidelines are authorized law 
enforcement activities or activities for which there is otherwise statutory authority 
for purposes of the Privacy Act. These Guidelines, however, do not provide an 
exhaustive enumeration of authorized FBI law enforcement activities or FBI 
activities for which there is otherwise statutory authority, and no restriction is 
implied with respect to such activities carried out by the FBI pursuant to other 
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authorities, Further questions about the application of the Privacy Act to 
authorized activities of the FBI should be addressed to the FBI Office of the 
General Counsel, the FBI Privacy and Civil Liberties Unit, or the Department of 


` Justice Offce of Privacy and Civil Liberties. 


D. NATURE AND APPLICATION OF THE GUIDELINES 


1. 





Repealers 
These Guidelines supersede the following guidelines, which are hereby repealed: 


a. The Attorney General’s Guidelines on General Crimes, Racketeering. 
Enterprise and Terrorism Enterprise Investigations (May 30, 2002) and all 
predecessor guidelines thereto. 


b. The Attorney General’s Guidelines for FBI National Security 
Investigations and Foreign Intelligence Collection (October 31, 2003) and 
all predecessor guidelines thereto. , 


G: The Attomey General’s Supplemental Guidelines for Collection, 
Retention, and Disseminatión of Foreign Intelligence (November 29, 
2006). 


d. The Attorney General Procedure for Reporting and Use of Information 
Concerning Violations of Law and Authorization for Participation in 
Otherwise legal Activity in FBI Foreign Intelligence, Counterintelligence 
or International Terrorism Intelligence Investigations (August 8, 1988), 


e. The Attorney General’s Guidelines for Reporting on Civil Disorders and 
Demonstrations Involving a Federal Interést (April 5, 1976). 


Status as Internal Guidance 


These Guidelines are set forth solely for the purpose of internal Department of 
Justice guidance. They are not intended to, do not, and may not be relied upon to 
create any rights, substantive or procedural, enforceable by law by any party in 
any matter, civil or criminal, nor do they place any limitation on otherwise lawful 
investigative and litigative prerogatives of the Department of Justice. 


Departures from the Guidelines | 


Departures from these Guidelines must be approved by the Director of the FBI, by 
the Deputy Director of the FBI, or by an Executive Assistant Director designated 
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by the Director. If a departure is necessary without such prior approval because of 
the immediacy or gravity of a threat to the safety of persons or property or to the 
national security, the Director, the Deputy Director, or a designated Executive 
Assistant Director shall be notified as soon thereafter as practicable. The FBI 
shall provide timely written notice of departures from these Guidelines to the 
Criminal Division and the National Security Division, and those divisions shall 
notify the Attorney General and the Deputy Attorney General. Notwithstanding 
this paragraph, all activities in all circumstances must be carried out in a manner 
consistent with the Constitution and laws of the United States. 


Other Activities Not Limited 


These Guidelines apply to FBI activities as provided herein and do not limit other 
authorized activities of the FBI, such as the FBI’s responsibilities.to conduct 
background checks and inquiries concerning applicants and employees under 
federal personnel security programs, the FBPs maintenance and operation of ` 
national criminal records systems:and preparation of national crime statistics, and 
the forensic assistance and administration fumctions-of the FBI‘ Laboratory. 











Ik. INVESTIGATIONS AND INTELLIGENCE GATHERING 


This Part of the Guidelines authorizes the FBI to conduct investigations to detect, obtain 
information about, and prevent and protect against federal crimes and threats to the national 
sécurity and to collect foreign intelligence. 


When an authorized purpose exists, the focus of activities authorized by this Part may be 
whatever the circumstances warrant. The subject of such an activity may be, for example, a 
- particular crime or threatened crime; conduct constituting a threat to the national security; an 
‘individual, group, or organization that may be involved in.criminal or national security- 
threatening conduct; or a topical matter of foreign intelligence interest. 


Investigations may also be undertaken for protective purposes in relation to individuals, 
groups, or other entities:that may be.targeted ‘for criminal victimization or acquisition, or for 
terrorist attack or other depredations by the enemies of the United States. For example, the 
participation of the FBI in special events management, in relation to public events or other 
activities whose character may make them attractive targets for terrorist attack, is an authorized 
exercise of the. authorities conveyed by these Guidelines. Likewise, FBI counterintelligence 

activities directed to identifying arid sécuting facilities, personnel, or information that may be 
targeted for infiltration, recruitment, or acquisition by foreign intelligence services are authorized 
exercisés of the authorities conveyed by these Guidelines. 


The identification and recruitment of human sources — who may be able to provide or 
obtain information relating to criminal activities, information relating to tetrorism, espionage, or 
other threats to the national security, or information relating to matters of foreign intelligence: 
interest — is also critical to the effectiveness of the FBI’s law enforcement, national security, and’ 
intelligence programs, and activities undertaken for this purpose are authorized.and encouraged. 


The scope of authorized activities under this Part is not limited to “investigation” in a 
narrow sense, such as solving particular cases or obtaining eviderice for use in particular criminal 
prosecutions. Rather, these activities also provide critical information needed for broader - 
analytic and intelligence purposes to facilitate the solution and prevention of crime, protect the 
national security, and further foreign intelligence objectives. These purposes include use of the 
information in intelligence analysis and planning under Part TV;.and dissemination of the 
‘information to other law enforcetnent, Intelligence Community, and White House agencies under 
Part VI. Information obtained at all stages of investigative activity is accordingly to be retained 
and disseminated for these purposes as provided in these Guidelines, or in FBI policy consistent 
with these Guidelines, regardless of whether it furthers investigative objectives in a narrower or 
more immediate sense. 


In the course of activities under.these Guidelines, .the FBI may incidentally. obtain 
information relating to matters outside of its areas of primary investigative résponsibility. For 
example, information relating to violations of state or local law or foreign law may be 
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incidentally obtained in the course of investigating federal crimes or threats to the national 
security or in collecting foreign intelligence. These Guidelines do not bar the acquisition of such 
information in the course of authorized investigative activities, the retention of such information, 
or its dissemination as appropriate to the responsible authorities in other agencies or 
jurisdictions. Part VI of these Guidelines includes specific authorizations and requirements for 
sharing such information with relevant agencies and officials, 


This Part authorizes different levels of information gathering activity, which afford the 
FBI flexibility, under appropriate standards and procedures, to adapt the methods utilized and the 
information sought to the nature of the matter under investigation and the character of the 
information supporting the need for investigation. 


Assessments, authorized by Subpart A of this Part, require an authorized purpose but not 
. any particular factual predication. For example, to carry out its central mission of preventing the 
commission of terrorist acts against the United States and its people, the FBI must proactively 
draw on available sources of information to identify terrorist threats and activities. It cannot be 
content to wait for leads to come in through the actions of others, but rather must be vigilant in 
detecting terrorist activities to the full extent permitted by law, with an eye towards early 
_ intervention and prevention of acts of terrorism before they occur. Likewise, in the exercise of 
its protective functions, the FBI is not constrained to wait until-information is received indicating 
that a particular event, activity, or facility has drawn the attention of.those who would threaten 
the national security. Rather, the FBI must take the initiative to secure-and protect activities and 
entities whose character may make them attractive targets for terrorism or espionage. The 
proactive investigative authority conveyed in. assessments is designed for, and may be utilized by, 
_ the FBI in the discharge of these responsibilities. For example, assessments may be conducted as 
part of the FBI’s special events management activities. 


More broadly, detecting and interrupting crimiinal activities at their early stages, and 
preventing crimes from occurring in the first place, is preferable to allowing criminal plots and 
activities to come to fruition. Hence, assessments may be undertaken proactively with such 
objectives as detecting criminal activities; obtaining information on individuals, groups, or 
organizations of possible investigative interest, either because they may be involved in criminal 
or national security-threatening activities or because they may be targeted for attack or - 
victimization by such activities; and identifying and assessing individuals who may have value as 
human sources. For example, assessment activities may involve proactively surfing the Internet 
to find publicly accessible websites and services through which recruitment by terrorist 
organizations and promotion of terrorist crimes is. openly taking place; through which child 
pornography is advertised and traded; through which efforts are made by sexual predators to lure 


children for purposes of sexual abuse; or through which fraudulent schemes are perpetrated 
against the public.. : : l 


The methods authorized:in assessments are generally those of relatively low 
intrusiveness, such as obtaining publicly available information, checking government records, 
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and requesting information from members of the public. These-Guidelines do not impose 
supervisory approval requirements.in assessments, given the types of techniques that are 
authorized at this stage (e.g., perusing the Internet for publicly available information). However, 
FBI policy will prescribe supervisory approval requirements for certain assessments, considering 
such matters as the purpose of the assessment and the methods being utilized. 


Beyond the proactive information gathering functions described above, assessments may- 
be used when allegations or other information concerning crimes or threats to the national 
security is received or obtained; and the matter can be checked out or resolved through thie 
relatively non-intrusive methods authorized in assessments. The checking of investigative leads 
in this manner can avoid the need to proceed to more formal levels of investigative activity, if the 
results of an assessment indicate that further investigation is not warranted. 


Subpart B of this Part authorizes a second level of investigative activity, predicated 
investigations. The purposes or objectives of predicated investigations are essentially the same 
as those of assessments, but predication as provided in these. Guidelines is needed — generally, 
allegations, reports, facts or. circumstances indicative of possible criminal or national security- 
threatening activity, or the potential for acquiring information responsive to foreign intelligence 
requirements —and supervisory approval must be obtained, to initiate prédicated investigations: 
Corresponding to the stronger predication and approval requirements, all lawful methods may be 
used in predicated investigations. A classified directive provides further specification concerning 
circumstances supporting certain predicated investigations. 


____Predicated investigations that concern federal crimes or threats to the national security are’ 
subdivided into preliminary investigations and full investigations. Preliminary investigations 
may be initiated on the basis of any allegation or information indicative of possible criminal or 
national security-threatening activity, but more substantial factual predication is required for full 
investigations.. While time limits are set for the completion of preliminary investigations, full 
investigations may be pursued without preset limits on their duration. , 


The final investigative category under this Part of the Guidelines is enterprise 
investigations, authorized by Subpart C, which permit a general examination of the structure, 
scope, and nature of certain groups and organizations. Enterprise investigations are a type of full 
investigations. Hence, they are subject to the purpose, approval, and’ predication requirements 
that apply to full investigations,.and all lawful methods may be used in carrying them out. The 
distinctive characteristic of enterprise investigations is that they concern groups or organizations 
that may be involved in the most serious criminal or national security threats to the public— 
generally, patterns of racketeering activity, terrorism or other threats to the national security, or 
the commission of offenses characteristically involved in terrorism as described in 18 U.S.C. 
2332b(g)(5)(B). A broad examination of the characteristics of groups satisfying these criteria is 
authorized in enterprise investigations, including any relationship of the group to a foreign 
power, its size and composition, its geographic dimensions and finances, its-past acts and goals, 
and its capacity for harm. > ` 
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A. ASSESSMENTS — 


1. 


Purposes 

Assessments may be carried out to detect, obtain information about, or prevent or 
protect against federal crimes or threats to the national security or to collect 
foreign intelligence. ae 


Approval 


The conduct of assessments is subject to any supervisory approval requirements 
prescribed by FBI policy. ; 


Authorized Activities 


Activities that may be carried out for the purposes described in paragraph 1. in an 
assessment include: as 


a, seeking information, proactively or in response to investigative leads, 
relating to: ‘ 


ak activities constituting violations of federal criminal law or threats 


to the national security, 


ii. the involvement or role of individuals, groups, or organizations in 
such activities; or 


iii. matters of foreign intelligence interest responsive to foreign 
intelligence requirements; 


b. identifying and obtaining information about potential targets of or 


vulnerabilities to criminal activities in violation of federal law or threats to 
the national security; - : 


C. seeking information to identify poténtial human sources, assess the 
suitability, credibility, or value of individuals as human sources, validate 
human sources, or maintain the cover or credibility of human sources, who 
may be able to provide or obtain information relating to criminal activities 
in violation of féderal law, threats to the national security, or matters of 
‘foreign intelligence interest; and 


d. obtaining information to inform or facilitate intelligence-analysis and 
planning as described in Part IV of these Guidelines. : ; 
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Authorized Methods 
Only the following methods may be used in assessments: 
a. Obtain publicly available information, 


b. Access and examine FBI and other Department of Justice records, and 
obtain information from-any FBI or other Department of Justice:personnel. 


C. Access and examine reċords maintained by, and request information from, 
other federal, state, local, or tribal, or foreign governmental entities or 
agencies. 

d. Use online services and resources (whether nonprofit or commercial). 

e. Use and recruit human sources in conformity with the Attorney General’s 


Guidelines Regarding the Use of FBI Confidential Human Sources, 


f Interview or request information-from members of the public and private 
entities. ` 


g. Accept information voluntarily provided by governmental or private 


entitics, 
h. Engage in observation or surveillance not requiring a court order, 
i Grand jury subpoenas for telephone or electronic mail subscriber 


information. 


B. PREDICATED INVESTIGATIONS 


1. 


Purposes 


Predicated investigations may be carried out to detect, obtain information about, 
or prevent or protect against federal crimes or threats to the national -security or to 
collect foreign intelligence. 


Approval 


The initiation of a predicated investigation requires supervisory approval at a level. 
or levels specified by FBI policy. A predicated investigation based on paragraph 
3.c. (relatirig to foreign intelligence) must be approved by a Special Agent in 
Charge or by an FBI Headquarters official as provided in such policy, 
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Circumstances Warranting Investigation 


A predicated investigation may be initiated on the basis of any of the following 
circumstances: 


a. - An activity constituting a federal crime or a threat to the national security 
has or may have occurred, is or may be occurring, or wili or may occur and 
the investigation may obtain information relating to the activity or the 
involvement or role of an individual, Soup, or organization in such 
activity, 


b. An individual, group, organization, entity, information, property, or 
activity is or may be a target of attack, victimization, a¢quisition, 
infiltration, or recruitment in connection with criminal activity in violation 
of federal law or a threat to the national security and the investigation may 
obtain information that would help to protect against such activity or 
threat. 


















E The investigation may obtain foreign intelligence that is responsive to a - 
. foreign intelligence requirement. 


` Preliminary and Full Investigations 


A predicated investigation relating to a federal crime or threat to the national 

_ security may be conducted as a preliminary investigation or a full investigation. A 
_ predicated investigation that is based solely on the authority to collect foreign 
intelligence may be conducted only as a full investigation. ; 


a. Preliminary investigations 
i. Predication Required for Preliminary Investigations 

A preliminary investigation may be initiated on the basis of 
information or’an allegation indicating the existence of a 
circumstance described in paragraph 3.a:-.b. 

ii. Duration of Preliminary Investigations 
A preliminary investigation must be concluded within six months 
of its initiation, which may be extended by up to six months by the 


Special Agent in Charge. Exténsions of preliminary investigations. 
beyond a year must be approved by FBI Headquarters. 














Methods Allowed in Preliminary Investigations 
All lawful methods may.be used in a preliminary investigation 
except for methods within the scope of Part V.A.11.-.13. of these 
Guidelines. 
‘Ds Full Investigations 
i. Predication Required for Full Investigations 
‘A full investigation may be initiated if there is an articulable 
factual basis for the investigation that reasonably indicates that a 
circumstance described in paragraph 3.a.-.b. exists or if'a 
circumstance described in paragraph 3.c. exists. 
ii. Methods Allowed in Full Investigations 
All Lees methods may be used in a full investigation. 


5. Notice Requirements 



















a. 





An FBI field office shall notify FBI Headquarters and the United States 
Attorney or:other appropriate Department of Justice official of the 
initiation by the field office ofa predicated investigation involving a: 
sensitive investigative matter. If the investigation is initiated by FBI 
Headquarters, FBI Headquarters shall notify the United States Attorney or 
other appropriate Department of Justice official of the initiation of suck an 
investigation. If the investigation concems a threat to the national 
security, an official of the National Security Division must be notified. 
The notice shall identify all sensitive investigative matters involved in the 
‘Investigation. 


The FBI shall notify the National Security Division of: 


i. the initiation of any full investigation of a United States person 
- relating to a threat to the national security; and 


ii. the initiation of any full investigation that is based on paragraph 
3.c. (relating to foreign mieligenca: 


The notifications undér subparagraphs a: and b.-shall be made as soon as 
practicable, but no later than 30 days after the initiation of an 
A investigation. 


d. The FBI shall notify the Deputy Attomey. General if FBI Headquarters 


disapproves a field office’s initiation of a-predicated investigation relating 
to a threat to the national security on thé ground that the predication for the 
investigation is insufficient. 


C. ENTERPRISE INVESTIGATIONS 


1. 


Definition 


A full investigation of a group or organization may be initiated as an enterprise 
investigation if there is an articulable factual basis for the investigation that 
reasonably indicates that the group or organization may have engaged or may be 
engaged in, or may have or may be engaged in planning or preparation or 
provision of support for: 


a. . a pattem of racketeering activity as defined in 18 U.S.C. 1961(5); 


"5. intematioñal terrorism or other threat to-the national security; 


c. domestic terrorism as defined in 18 U.S.C. 2331(5) involving a violation 
-of federal criminal law; 


d. furthering political‘or social goals wholly or in part througli activities that 
~ involve force or violence and a violation of federal criminal law; or 


e. an offense described in 18 U.S.C. 2332b(g)(5)(B) or 18 U.S.C. 43. 


Scope 


The information. sought i in an enterprise investigation may include a general 
examination of the structure, scope, ‘and nature of the group or organization 
including: its relationship, if any, to a foreign power; the identity and relationship 
of its members, employees, or other persons who may be acting in furtherance of 
its objectives; its finances and resources; its geographical gimenean; and its past 
and future activities and goals. 


Notice and Reporting Requirements 


a. The responsible Department of Justice component for the purpose of 
notification and reports in enterprise investigations is the National. Security 
Division, except that, for the purpose of notifications and reports in an 
enterprise investigation relating to a pattem of racketeering activity that 
does not involve an offense or offenses described in 18 U.S.C. 
2332b(g)(5)(B), the responsible Department of Justice component is the 
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Organized Crime and Racketeering Section of the Criminal Division. 


An FBI field office shall notify FBI Headquarters of the initiation by the 
field office of an enterprise investigation. 


The FBI shall notify the National Security Division or the Organized 
Crime and Racketeering Section of the initiation of an enterprise 
investigation, whether by a field office or by FBI Headquarters, and:the 
component so notified shall notify the Attorney General and the Deputy 
Attorney General. The FBI shall also.notify any relevant United States 
Attorney’s Office, except that any investigation within the scope of Part 
VILD.1.d of these Guidelines (relating to counterintelligence - 
investigations) is to be, treated as provided in that provision. Notifications 
‘by the FBI under this subparagraph shall be provided as soon as 
practicable, but no later than.30 days after the initiation of the 
investigation. ; 


The Assistant Attorney General for National Security or the Chief of the 
Organized Crime atid-Rackéteeritig Section, as appropriate, may atany | 
time request the FBI to provide a report on the status of an enterprise 
investigation and the FBI will provide such reports as requested. 
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I. ASSISTANCE TO OTHER AGENCIES 


The FBI is authorized to provide investigative assistance to other federal, state, local, or 
tribal, or foreign agencies as provided in this Part. 


The investigative assistance authorized by this Part is often concerned with the same 
objectives as those identified in Part II of these Guidelines — investigating federal crimes and 
threats to the national security, and collecting foreign intelligence. In some cases, however, 
investigative assistance to other agencies is legally authorized for purposes other than those 
identified in Part I, such as assistance in certain contexts to state or local agencies in the 
investigation of crimes under state or local law, see 28 U.S.C. 540, 540A, 540B, and assistance 
` to foreign agencies in the investigation of foreign law violations pursuant to international 
agreements. Investigative assistance for such legally authorized purposes is permitted under this 
Part, even if it is not for purposes identified as grounds for investigation under Part 1. 


The authorities provided by this Part are‘cumulative to Part II and do not limit the FBI’s 
investigative activities under Part II. For example, Subpart B.2 in this Part authorizes 
investigative activitiés by the FBI in certain circumstances to inform decisions by thé President 
concerning the deployment of troops to deal with civil disorders, and Subpart B.3 authorizes 
investigative activities to-facilitate demonstrations and related public health and safety measures. 
The requirements and limitations in these provisions for conducting investigations for the 
specified purposes do not limit the FBI’s authority under Part II to investigate federal crimes or 
threats to the national security that occur in ue context of or in connection with civil disorders or 
demonstrations. 


A. THE INTELLIGENCE COMMUNITY 


The FBI may provide investigative assistance (including operational support) to 
authorized intelligence activities of other Intelligence Community agencies, 


B. FEDERAL AGENCIES GENERALLY 
1- Tn General 

The FBI may provide assistance to any federal agency in the investigation of 
federal crimes or threats to the national security: or in the collection of foreign 

_ intelligence, and investigative-assistance to any federal agency for any other 
purpose that may be legally authorized, including investigative assistance to the 
Secret Service in support of its protective responsibilities. 
The President in Relation to Civil Disorders 
a. At the direction of the Attomey General, the Depùty Attomey General, or 
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the Assistant Attorney General for the Criminal Division, the FBI shall 
collect information relating to actual or threatened civil disorders to assist 
the President in determining (pursuant to the authority of the President 
under 10 U.S.C. 331-33) whether use of the armed forces or militia is 
required and how a.decision to commit troops should be implemented. 
The information sought shall concem such matters as: 


i. The size of the actual or threatened disorder, both in number of 
people involved or affected and in geographic area. 


ii, The potential for violence. 





iii. The potential for expansion of the disorder in light of community 
conditions and underlying causes of the disorder. 


iv. The relationship of the actual or threatened disorder to, the 
enforcement of federal law or court orders and the likelihood that 
state or local authorities will assist in enforcing those laws or 
orders: : 


v. The extent of state or local resources available to handle the 
disorder. 


b. Investigations under this paragraph will be authorized only.for a period of 
30 days, but the authorization may be renewed for subsequent 30 day 
periods. 


c: Notwithstanding Subpart E.2 of this Part, thé methods that may be used in 
an investigation under this paragraph are those described in subparagraphs 
a.-.d., subparagraph f. (other than pretext interviews or requests), or 
subparagraph g. of Part I.A.4 of these Guidelines. The Attorney General, 
. the Deputy Attorney General, or the Assistant Attornéy General for the 
Criminal Division may also authorize the use of other methods described 
in Part 11.A.4. 


3. Public Health and Safety Authorities in Relation to Demonstrations 










a. At the direction of the Attorney General, the Deputy Attorney General, or 
the Assistant Attomey General for the Criminal Division, the FBI shall 
_ collect information relating to demonstration activities that are likely to 
require the federal government to take action to facilitate the activities and 
provide public health and safety measures with respect to those activities. 
The information sought in such an investigation shall be that needed to 
facilitate an adequate federal response to ensure public health and safety. 
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and to protect the exercise of First Amendment rights, such as: 
i. The time, place, and type of activities planned. 
ii. The number of persons expected to participate. 


iii. The expected means and routes of travel for participants and 
_ expected time of arrival. 


iv. Any plans for lodging or housing ofparticipants in connection with 
l the demonstration. 


b. Notwithstanding Subpart E.2 of this Part, the methods that may be used in 
an investigation under this paragraph are those described in subparagraphs 
a.-.d., subparagraph f. (other than pretext interviews or requests), or 
subparagraph g. of Part IL.A.4 of these Guidelines. The Attorney General, 
the Deputy Attomey General, or the Assistant Attorney General for the 
Criminal Division may also authorize the use of other methods describéd 
in Part 11.A.4. 


STATE, LOCAL, OR TRIBAL AGENCIES 


The FBI may provide investigative assistance to state, local, or tribal agencies in the 
investigation of matters that may involve federal crimes or threats to the national security, 
or for such other purposes as may be legally authorized. 


FOREIGN AGENCIES 


1. 


At the request of foreign law enforcement, intelligence, or security agencies, the 
FBI may conduct investigations or provide assistance to investigations by such 
agencies, consistent with the interests of the United States (including national 
security interests) and with due consideration of the effect on any United States 
person. Investigations or assistance under this paragraph must be approved as 
provided by FBI policy. The FBI shall notify the National Security Division, 
concerning investigation or assistance under this paragraph where: (i) FBI 
Headquarters approval for the activity is required pursuant to the approval policy 
adopted, by the FBI for purposes of this paragraph, and (ii) the activity relates to a 
threat to the national security. Notification to the National. Security Division shall 
be made as soon as practicable but no later than’30 days after the approval. 
Provisions regarding notification tò or coordination with the Central Intelligence 
Agency by the FBI in memoranda of understanding or agreements with the 
Central Intelligence Agency may also apply-to activities under this paragraph. 


The FBI may not provide assistance to foreign law enforcement, intelligence, or 
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security. officers conducting investigations within the United States unless such 


officers have provided prior notification to the Attorney General as required by 18 
U.S.C. 951. 


The FBI may conduct background inquiries concerning consenting individuals 
when requested by foreign government agencies. 


The FBI may provide other material and technical assistance to foreign 
governments to the extent not otherwise prohibited by law. 


E. APPLICABLE STANDARDS AND PROCEDURES 


1. 


Authorized investigative assistance by the FBI to other agencies under this Part 
includes-joint operations and activities with such agencies. 


All lawful methods may be used in investigative.assistance activities under this 
Part. 


Where the methods used j in investigative assistance activities id this Part go 
beyond the methods authorized in assessments under Part I.A.4 ofthese 
Guidelines, the following-apply: 


as: Supervisory approval must be obtained for the activity at a level or levels 
specified in FBI policy. 


' Notice must be provided concerning sensitive investigative matters in the 
manner described in Part IL.B.5. 


A database or records system must be maintained that permits, with 
respect to each such activity, the prompt retrieval of the status of the 
activity (open or closed), the dates of opening and closing, and the basis 
for the activity. This database or records system may be combined with 


the database or records oo for predicated investigations required by 
Part VI.A.2. 








IV. INTELLIGENCE ANALYSIS AND PLANNING 


The FBI is authorized to engage in analysis and planning. The FBI’s analytic activities 
enable the FBI to identify-and understand trends, causes, and potential indicia of criminal activity 
and other threats to the United States that would not be apparent from the investigation of 
discrete matters alone. By means of intelligence analysis and strategic planning, the FBI can: 

_ more effectively discover crimes, threats to the national security, and other matters of national: 
intelligence interest and can provide the critical support needed for the effective discharge ofits 
investigative responsibilities and other authorized activities. For example, analysis of threats in 
the context of special events management, concerning public events or activities that may be 
targeted for terrorist attack, is an authorized activity under this Part. 


In carrying out its intelligence functions under this Part, the FBI is authorized to draw on 
all lawful sources of information, including but not limited to the results of investigative 
activities under these Guidelines. Investigative activities under these Guidelines and other 
legally authorized activities through which the FBI acquires information, data, or intelligence 
may properly be utilized, structured, and prioritized so as to support and effectuate the FBI’s 
intelligence mission. ‘The remainder of this-Part provides further-specification concerning. 
activities and functions authorized as part of that mission. 


A. STRATEGIC INTELLIGENCE ANALYSIS 


The FBI is authorized to develop overviews and analyses of threats to and vulnerabilities 
of the United States and its interests in areas related to the FBI’s responsibilities, ~ 
inchiding domestic and international criminal threats and activities; domestic and 
international activities, circumstances, and developments affecting the national security; 
and matters relevant to the conduct of the United States’ foreign affairs. The overviews 
and analyses prepared under this Subpart may encompass present, emergent, and potential 
threats and vulnerabilities, their contexts and causes, and identification and analysis of 
means of responding to them. 


B. REPORTS AND ASSESSMENTS GENERALLY 
The FBI is authorized to conduct research, analyze information, and prepare reports and 
assessments concerning matters relevant to authorized FBI activities, such as reports and 
assessments concerming: types of criminals or criminal activities; organized crime groups; 


terrorism, espionage, or other threats to the national security; foreign intelligence matters; 


or the scope and nature of criminal activity in particular geographic areas or sectors of the 
economy. 


C. INTELLIGENCE SYSTEMS 
The FBI is authorized to operate intelligence, identification, tracking, and information 
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` systems in support of authorized investigative activities, or for such other or additional 
purposes as may be legally authorized, such as intelligence and tracking systems relating 
to terrorists, gangs, or organized’crime groups. 
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V. AUTHORIZED METHODS 


A. PARTICULAR METHODS 


All lawful investigative methods may be used in activities under these Guidelines as 
authorized by these Guidelines. Authorized methods include, but are not limited to, those © 
identified in the following list. The methods identified in the'list are in some instances subject to 
~ special restrictions or review or approval requirements as noted: 


i 


2: 


The methods described in Part I.A.4 of these Guidelines. 


Mail covers. 


Physical searches of personal or real property where a warrant or.court order is not 
legally required because there is no ee expectation of privacy (e.g., trash 
covers). 


Consensual monitoring. of communications, .including consensual computer 
monitoring, subject to legal review by the Chief Division Counsel or the FBI 
Office of the General.Counsel. Where a sensitive monitoring circumstance is 
involved, the monitoring must be approved by the Criminal Division or, if the 
investigation concerns a threat to the national security or foreign intelligedier, by 
the National Security Division. 


Use.of closed-circuit television, direction finders, and other monitoring devices, 
subject to legal review by the Chief Division Counsel or the FBI Office of the 


. General Counsel. (The methods described in this paragraph usually do not require 


court orders or warrants unless they involve physical trespass or non-consensual 
monitoring of communications, but legal review is necessary to ensure 


‘ compliance with all applicable legal requitements.) 


Polygraph examinations. 


Undercover operations. In investigations relating to activities in violation of 


_ federal criminal law that do not concern threats to the national security or foreign 


intelligence, undercover operations must be carried out in conformity with, the 
Attorney General’s Guidelines on Federal Bureau of Investigation Undercover 
Operations. In investigations that are not subject to the preceding sentence 


because they concern threats to the national security or foreign intelligence, 


undercover operations involving religious or political organizations must be 
reviewed and approved by FBI Headquarters, with participation by the National . 
Security Division in the review process. 

Compulsory process as authorized by law, including grand jury subpoenas and 


31 





13. 


other subpoenas, National Security Letters (15 U.S.C. 1681u, 1681v; 18 U.S.C. 
2709; 12 U.S.C. 3414(a)(5)(A); 50 U.S.C. 436), and Foreign Intelligence 
Surveillance, Act orders for the production of manele things (50 U.S.C. 1861-63). 


Accessing stored wire and electronic communications and transactional records in 
conformity with chapler 121 of title 18, United States Code (18 U.S. C. 2701- 


` 212). 


Use of pen registers and trap and trace devices in conformity with chapter 206 of 
‘title 18, United States Code (18 U.S.C. 3121-3127), or the Foreign Intelligence 
Surveillance Act (50 U.S.C. 1841-1846). 


Electronic surveillance in conformity with chapter 119 of title 18; United States 
Code (18 U.S.C. 2510-2522), the Foreign Intelligence Surveillance Act, or 


- Executive Order 12333 § 2:5; 


Physical searches, including mail openings, in conformity with Rule 41 of the 
Federal Rules of Criminal Procedure, the Foreign Intelligence Surveillance Act,.or 
Executive Order-12333 § 2.5. A classified-directive provides additional: limitation 
on certain searches, 


Acquisition of foreign intelligence information in conformity with title VII of the 
Foreign Intelligence Surveillance Act. 


SPECIAL REQUIREMENTS 


Beyond the limitations noted in the list above relating to. particular investigative methods, 
the following requirements are to be observed: 


1. 


Contacts with Represented Persons 


Contact with represented persons may implicate legal restrictions and affect the 
admissibility of resulting evidence. Hence, if an individual is known to be 
represented by counsel in a particular matter, the FBI will follow applicable law 
and Department procedure concerning contact with represented individuals in the 
absence of prior notice to counsel. The Special Agent in Charge and the United 
States Attorney or their designees shall consult periodically on applicable law and 
Department procedure.. Where issues arise concerning the consistency of contacts 
with represented persons with applicable attorney conduct rules, the United States - 


Attomey’s Office should consult with the Professional Responsibility Advisory 
Office. 








Use of Classified Investigative Technologies 


Inappropriate use of cere investigative technologies may risk the 
compromise of such technologies. Hence, in an investigation relating to activities 
in violation of federal criminal law that does not concern a threat to the national 
security or foreign intelligence, the use of such technologies must be in 
conformity with the Procedures for the Use of Classified Investigative 
Technologies in Criminal Cases. 


C. OTHERWISE ILLEGAL ACTIVITY 


L 


‘Otherwise illegal activity by an FBI agent or employee in an undercover operation 


relating to activity in violation of federal criminal law that does not concern a 
threat to the national: security or foreign intelligence must be approved in 
conformity with the Attorney General’s Guidelines on Federal Bureau of 
Investigation Undercover Operations. Approval of otherwise illegal activity in 
conformity with those guidelines is sufficient and satisfies any approval 
requirement that would otherwise apply under these Guidelines. 


Otherwise illegal activity by a human source must be approved in conformity with 
the Attorney General’s Guidelines Regarding the Use of FBI Confidential Human 
Sources. - 


Otherwise illegal activity by an FBI agent or employee that.is not within the scope 


_ of paragraph 1. must be approved by a United States Attorney’s Office or a 
` Department of Justice Division, except that a Special Agent in Charge may 


authorize the following: 


a. otherwise illegal activity that would not be a felony under federal, state, 
local, or. tribal law; 


b. ` consensual monitoring of communications, even if a crime under state, 
local, or tribal law; 


C: the controlled purchase, receipt, delivery, or sale of drugs, stolen property, 
or other contraband; 


d. the payment of bribes; 


e. the making of false representations in concealment of personal identity o or 
the true ownership of a proprietary; and 


f conducting a money laundering transaction or transactions involving an 
aggregate amount not exceeding $1 million. 
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However, in an investigation relating to a threat to the national security or foreign 

intelligence collection, a Special Agent in Charge May not authorize an activity 

that may constitute a violation of export control laws or laws that concern the 

proliferation of weapons of mass destruction. In such an investigation, a Special 

‘Agent in Charge may authorize an activity that may otherwise violate prohibitions 

of material support to terrorism only in accordance with standards established by 

the Director of the FBI and agreed toby the Assistant Attorney General'for Z 
National Security. l ' 


The following activities may not be authorized: 
a. Acts of violence. 


b. Activities whose authorization is prohibited by law, including unlawful 
investigative methods, such as illegal electronic surveillance or illegal 
searches. 


i Subparagraph a., however, does not limit the right of FBI agents or employees to 
engage in any lawful use of force, including the-use of force in self-defense or 
defense of others or otherwise in the lawful discharge of their duties. . 


An agent or employee may engage in otherwise illegal activity that could be 
authorized under this Subpart without the authorization required by paragraph 3. if 
necessary to meet an immediate threat to the safety of persons or property or to the 
national security, or to prevent the compromise of an investigation or the loss of a. 
significant investigative opportunity. In such a case, prior to engaging in the 
otherwise illegal activity, every effort should be made by. the agent or employee to 
consult.with the Special Agent in Charge, and by the Special Agent in Charge to 
consult with the United States Attomney’s Office or appropriate Department of 
Justice Division whefe. the authorization of that office or division would be 
required under paragraph 3., unless the circumstances:preclude such consultation. 
Cases ‘in which otherwise illegal activity occurs pursuant to this paragraph without 
the authorization required by paragraph 3. shall be‘reported as soon as possible to 
the Special Agent in Charge, and by the Special Agent in Charge to FBI 
Headquarters and to the United States Attorney’s Office or appropriate 
Department of Justice Division. 


In an investigation relating to a threat to the national security or foreign 
intelligence collection, the National Security Division is the approving component 
for otherwise illegal activity for which paragraph 3, requires approval beyond 
internal FBI approval. However, officials in other components may approve 
otherwise illegal activity in such investigations as aithorized by the Assistant 

` Attorney General for National Security. . 
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RETENTION AND SHARING OF INFORMATION 
RETENTION OF INFORMATION 


E The FBI shall retain records relating to activities under these Guidelines in 
accordance with a records retention plan approved by the National Archives and 
Records Administration. ‘ 


2. The FBI shall maintain a database or records system that permits, with respect to 
each predicated investigation, the prompt retrieval of the status of the 
investigation (open or closed), the dates of opening and closing, and the basis for 
the investigation. 


INFORMATION SHARING GENERALLY 

lL Permissive Sharing 
‘Consistent with law and with any applicable agreements or understandings with 
other agencies concerning the dissemination of information they have provided, 


the FBI may disseminate information obtained or produced ERNER activities 
under these Guidelines: 


a. within the FBI and to other components of the Department of Justice; 












b. to other federal, state, local, or tribal agencies if related to their 
responsibilities and, in relation to other Intelligence Community agencies, 
the determination whether the information is related to the recipient’s 
responsibilities may be left to the recipient; 


c. to congressional committees as authorized by the Department of Justice 
Office of Legislative Affairs; 


d, to foreign agencies if the information is related to their responsibilities and- 
the dissemination is consistent with the interests of the United States 
(including national security interests) and the FBI has ‘considered the effect 
such dissemination may reasonably be expected to have on any identifiable 
United States person; 


e. if the information is publicly available, does.not identify United States 


persons, or is disseminated with the consent of the person whom it 
concerns; 


f, if the dissemination is necessary to protect the safety or security of persons 
or property, to protect against or prevent a crime or threat to the national 
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` security, or to obtain information for the conduct of an authorized FBI 
investigation; or 


g. if dissemination of the information is otherwise permitted by the Privacy 
„Act (5 U.S.C. 552a). 


Required Sharing 


The FBI shall share and disseminate information as required by statutes; treaties,, 
Executive Orders, Presidential directives, National Security Council directives, 
Homeland Security Council directives, and Attorney See policies, 
memoranda of understanding, or agreements. 


Cc, INFORMATION RELATING TO CRIMINAL MATTERS 


Sb 


Coordination with Prosecutors 


‘Tn an investigation relating to possible criminal activity-iti violation of federal law,. 


the agent conducting the investigation shall maintain periodic written or oral 
contact with the appropriate federal prosecutor, as circumstances warrant and as 
requested by the prosecutor. When, during such an investigation, a matter appears 
arguably to warrant prosecution, the agent shall present the relevant facts to the 
appropriate federal prosecutor. Information on investigations that have been 
closed shall be available on request to a United States Attorney or his or her 
designée or an appropriate Department of Justice official. 


Criminal Matters Outside FBI Jurisdiction. 


When credible information is received by an FBI field office concerning serious 

criminal activity not within the FBI’s investigative jurisdiction, the field office 

shall promptly transmit the information or refer the complainant to a law i 
enforcement agency having jurisdiction, except where disclosure would 2 
jeopardize an ongoing ‘investigation, endanger the safety of an individual, disclose 

the identity of a human source, interfere with a human source’s cooperation, or 

reveal legally privileged information. If full disclosure is not made for the reasoris 

indicated, then, whenever feasible, the FBI field office shall make at least limited 


disclosure to a law enforcement agency or agencies having jurisdiction, and full 


disclosure shall be made as soon as the need for restricting disclosure is no longer 
present: Where full disclosure is not made to the appropriate law enforcement 
agencies within 180 days, the FBI field office shall promptly notify FBI 
Headquarters in writing of the facts and circumstances concerning the criminal 
activity, The FBI shall make periodic reports to the Deputy Attorney General on 
such nondisclosures and incomplete disclosures, in a form suitable to protect the 
identity of human sources. 
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3. - Reporting of Criminal Activity 


a. When it appears that an FBI agent or employee has engaged in-criminal 
‘activity in the course of an investigation under these Guidelines, the FBI 

shall notify the United States Attorney’s Office or an appropriate 
Department of Justice Division. When it appears that a human soutce has . 
engaged in-criminal activity in the course of an investigation under. these 
Guidelines, the FBI shall proceed as provided in the Attorney General’s 
Guidelines Regarding the Use of FBI Confidential Human Sources. When 
information concerning possible criminal activity by any other person 
appears in the course of an investigation under these Guidelines, the FBI 
shall initiate an investigation of the criminal activity if warranted, and 
shall proceed as provided in paragraph Y. or 2. 


b. - Thereporting requirements under this paragraph relating to criminal 
activity. by FBI agents or employees or human sources do not apply.to 
‘otherwise illegal activity that is authorized in conformity with these 

_ Guidelines or other Attorney General guidelines or to minor traffic 
_ offenses. 


INFORMATION RELATING TO NATIONAL SECURITY AND FOREIGN 
INTELLIGEN CE DEAT EERS 


The general principle reiectedi in current laws and policies is that:there is a responsibility 
to provide information as consistently and fully as possible to agencies with relevant 
responsibilities to protect the United States and its people from terrorism and other threats 
to the national security, except as limited by specific constraints on such sharing. The 
FBI’s responsibilities in this area include carrying out the requirements of the 
Memorandum of Understanding Between the Intelligence Community, Federal Law 
Enforcement Agencies, and the Department of Homeland Security Concerning 

_ Information Sharing (March 4, 2003), or any successor memorandum of understanding or- 
agreement. Specific requirements also exist for internal coordination and consultation 
with other Department of Justice components, and for provision of national security and 
foreign intelligence information to White House agencies, as provided in the ensuing 
paragraphs, 


i. Department of Justice 


a. The National Security Division shall havé access to all information 
obtained by the FBI through activities relating to threats to the national 
security or foreign intelligence. The Director of the FBI and the Assistant 
Attorney General for National Security shall consult concerning these 
activities whenever requested by either of them, and the FBI shall provide 
such reports and information concerning these activities as the Assistant 
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Attomey General for National Security may request. In addition to any 
reports or information the Assistant Attorney General for National 
Security may specially request under this subparagraph, the FBI shall 
provide annual reports to the National Security Division conceming its 
foreign intelligence collection program, including information concerning ~ 
the scope and nature of foreign intelligence collection activities in each 
FBI field office. 


The FBI shall keep the National Security Division apprised of all 
information obtained through activities under these Guidelines that is 
necessary to the ability of the United States to investigate or protect 
against threats to the national security, which shall include regular 
consultations between the FBI and the National Security Division to 
exchange advice and-information relevant to addressing such threats 
through criminal prosecution or other means. 


Subject to subparagraphs d. and e., relevant United States Attorneys’ 
Offices shall have access to and shall receive information from the FBI 
relating to threats to the national security, and may engage in consultations 
with the FBI relating to such threats, to the same-extent as the ‘National 
Security Division. The relevant United States Attorneys’ Offices shall 
receive such access and information from the FBI field offices. 


In a counterintelligence investigation —i.e., an investigation relating to a 
matter described in Part VILS.2 of these Guidelines — the FBI’s provision 
of information to and consultation with a United States Attorney’s Office 
are subject to authorization by the National Security Division. In 
consultation with the Executive Office for United States Attorneys and the 
FBI, the National Security Division shall establish policies setting forth 
circumstances in which the FBI will consult with the National Security 
Division prior to informing relevant United States Attorneys’ Offices 
‘about such an investigation. The policies established by the National 
Security Division under this subparagraph, shall (among other things) 
provide that: 


io the National Security Division will, within 30 days, authorize the 

i FBI to share with the United States Attorneys’ Offices information 
relating to certain espionage investigations, as defined by the 
policies, unless such information is withheld because of substantial 
national security considerations; and 


il, the FBI may consult freely with United States Attorneys’ Offices 
concerning investigations within the scojie of this subparagraph 
during an-emergency, so long as the National Security Division is 
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notified of such consultation as soon as practical after the 
consultation. 


e. - Information shared with a United States Attorney’s Office pursuant to 
subparagraph c. or d. shall be disclosed only to the United States Attorney 
or any Assistant United States Attorneys designated by the United States 
Attorney as points of contact to receive such information, The United 

‘ States Attorneys and designated Assistant United States Attorneys shall 
have appropriate security clearances and shall receive training in the ` 
handling of classified information and information derived from the 
Foreign Intelligence Surveillance Act, including training concerning the 
secure handling and storage of such information and training conceming 
requirements and limitations relating to the use, retention, and 
dissemination of such information. 


Ê The disclosure and sharing of information by the FBI únder this paragraph 
is subject to any limitations required in orders issued by the Foreign 
Intelligence Surveillance Court, controls imposed by the originators of 
sensitive material, and restrictions established by the Attorney General or 
the Deputy Attorney General in particular cases. The disclosure and’ 
sharing of information by the FBI under this paragraph that may’ disclose 
the identity of human sources is governed by the relevant provisions of the 
Attorney General’s Guidelines ReneS the Use of FBI Confidential 
Human Sources. 


White House 


In order to carry out their responsibilities, the President, the Vice President, the 
Assistant to the President for National Security Affairs, the Assistant to the 
President for Homeland Security Affairs, the National Security Council arid its 
‘staff, the Homeland Security Council and its staff, and other White House 
Officials and offices require information from all federal agencies, including 
foreign intelligence, and information relating to international terrorism and other 
threats to the national security. The FBI accordingly may disseminate to the 
White House foreign intelligence and national security information obtained 


through activities under these Guidelines, subject to the following standards and 
procedures: 


a. Requests to the FBI for such information from the White House shall be 
made through the National Security Council staff or Homeland Security 
Council staff including, but not liniited to,-the National Security Council 
Legal and Intelligence Directorates and Office of Combating Terrorism, 


or through the President’s Intelligence Advisory Board or the Counsel to 
the President. 
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Compromising informiation concerning domestic officials or political 
organizations, or information concerning activities of United States 

_ persons intended to-affect the political process in the United States, may 
be disseminated to the White House only with the approval of the Attorney 
General, based on a determination that such dissemination is needed for 
foreign intelligence purposes, for the purpose of protecting against 
international terrorism or other threats to the national security, or for the 
conduct of foreign affairs. However, such approval is not required: for 
dissemination to the White House of information concerning efforts of . 
foreign intelligence services to penetrate the White House, or conceming 
contacts by White-House personnel with foreign intelligence service 
personnel. 


Exainples of types of information that are suitable for dissemination to.the 
White House on.a routine basis include, but. are not limited to: 


i, - information-conceming intemational terrorism;. 


dii. information conceming activities of foreign intelligence sérvices in 
the United States; 


information indicative of i imminent hostilities involving any 
foreign power; 


information concerning potential cyber threats to the United States 
or its allies; 


information indicative of policy positions adopted by foreign 
officials, governments, or powers, or their reactions to United 
States foreign policy initiatives; 


information relating to possible changes in leadership positions of 
foreign governments, parties, factions, or powers; 


information concerning foreign economic or foreign political 
matters that might have national security ramifications; and 


information set forth in regularly published national intelligence 
regpirements, 


Communications by the FBI to the White House that relate to a national ` 
` security matter and concern a litigation.i issue for à specific pending case 
must be made known to the Office of the Attorriey General, the Office of 
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the Deputy Attorney General, or the Office of the Associate Attorney 
General. White House policy may specially limit or prescribe the White 
House personnel who may request information concerning such issues 
from the FBI. 


The limitations on dissemination of information by the FBI to the White 
House under these Guidelines do not apply to dissemination to the White 
House of information acquired in the course of an FBI investigation 
requested by. the White House into the background of a potential:employee 
or appointee, or responses to requests from the White House under 
Executive Order 10450. 


3. Special Statutory Requirements 


a. 


Dissemination of information acquired under the Foreign Intelligence 
Surveillance Act is, to the extent provided in that Act, subject to 
minimization procedures and other requirements specified in that Act. - 


Information obtained through the use of National Security Letters under 15 
U.S.C. 1681v may be disseminatéd in conformity with the general 
standards of this Part. Information obtained through the use of National 
Security Letters under other statutes may be disseminated in conformity 
with the general standards of this Part, subject to any applicable limitations. 
in their governing statutory provisions: 12 U.S.C. 3414(a)(5)(); 15 

U.S.C. 1681u(f); 18 U.S.C. 2709(d); 50 U.S.C. 436(e). 











> 


DEFINITIONS 


CONSENSUAL MONITORING: monitoring of communications for which a court order 
or warrant is not legally required because of the consent ofa party to the communication. 


EMPLOYEE: an FBI employee or an employee of another agency working under.the 
direction and control of the FBI. 


FOR OR ON BEHALF OF A FOREIGN POWER: the determination that activities are 
for or on behalf of a foreign power shall be based on consideration of the extent to which 
the foreign power is involved in: 


1. control or policy direction; 

2. financial or material support; or 

3. leadership, dsisomneni, or discipline. 

FOREIGN: COMPUTER INTRUSION: the use or attempted use of any cyber-activity or 
other means, by, for, or on behalf of a foreign power to scani, probe, or gain unauthorized 
access into one or. more U.S.-based computers. 

FOREIGN INTELLIGENCE: information Telating to the capabilities, intentions, or 


activities of foreign governments or elements thereof, foreign organizations or foreign 
persons, or international terrorists. 


FOREIGN INTELLIGENCE REQUIREMENTS: 


1. > national intelligence requirements issued pursuant to authorization by the Director 
of National Intelligence, including the National Intelligence Priorities Framework 
and the National HUMINT Collection Directives, or any successor directives 
thereto; 


2 requests to collect foreign intelligence by the President or by Intelligence 


Community officials designated by the President; and 


3. directions to collect foreign intelligence by the Attorney General, the Deputy 
Attorney General, or an official designated by the Attorney General. 


FOREIGN POWER: 
1. __ a foreign government or any component thereof, whether or not recognized by the 
United States; : ' 
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6. 


a faction of a foreign nation or nations, not substantially composed of ae 
States persons; 


an entity that is openly acknowledged by a foreign government or governments to 
be directed and controlled by such foreign government or governments; 


a group engaged in intemational terrorism or activities in preparation therefor; 


a foreign-based political organization, not substantially composed of United States 
persons; or 


an entity that is directed or controlled by'a foreign government or governments. 


HUMAN SOURCE: a Confidential Human Source as defined in the Attorney. General’s 
Guidelines Regarding the Use of FBI Confidential Human Sources. 


INTELLIGENCE ACTIVITIES: any activity conducted for intelligence purposes or to . 
affect political or governmental processes by, for, or on behalf of a foreign power. 


INTERNATIONAL TERRORISM: 


Activities that: 


L. 


involye violent acts or.acts dangerous to human life that violate federal, state, 
local, or tribal criminal law or would violate such law if committed within the 
United States or a state, local, or tribal jurisdiction; 


appear to be intended: 
i. to intimidate or coerce a civilian population; 
ii. to influence the policy of a government by intimidation or coercion; or- 


iii. to affect the conduct of a government by assassination or kidnapping; and 


occur totally outside the United States, or transcend national boundaries in terms 
of the means by which they are accomplished, the persons they appear to be 
intended to coerce or intimidate, or the locale in which their perpetrators operate 
or seek asylum. 


PROPRIETARY: a sole proprietorship, partnership, corporation, or other business entity 
operated on a commercial basis, which is owned, controlled, or operated wholly or in part 
on behalf of the FBI, and whose relationship with the FBI is concealed from third pertiga, 
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PUBLICLY AVAILABLE: information that has been published or broadcast for public 
consumption, is available on request to the public, is accessible on-line or otherwise to 
the public, is available to the public by subscription or purchase, could be seen or heard 
by any casual observer, is made available at a meeting open to the public, oris obtained. 
by visiting any place or attending any event that is open to the public. 


RECORDS: any records, databases, files, indices, information systems, or other. retained 
information. ` ` 


‘SENSITIVE INVESTIGATIVE MATTER: an investigative matter involving the 
activities of a domestic public official or political candidate (involving corruption or a 
threat to the national security), religious or political organization or individual prominent 
in such an organization, or news media, or any other matter which, in the judgment of the 
official authorizing an investigation, should be brought to the attention of FBI 
Headquarters and other Department of Justice officials. 


SENSITIVE MONITORING CIRCUMSTANCE: 


1. investigation of a member of Congress, a federal judge, a member of the 
Executive Branch at Executive Level IV or above, òr a persón who has served in 
such capacity within the previous two years; 


2. investigation of the Governor, Lieutenant Governor, or Attorney General of any , 
state or territory, or a judge or justice of the highest court of any state or territory, 
concerning an offense involving bribery, conflict of interest, or extortion related to. 

‘the performance of official duties; 


3. a patty to the communication is in the custody of the Bureau of Prisons or the 
United Statés Marshals Service or is being or has been afforded protection in the 
Witness Security Program; or 


4. the-Attorney General, the Deputy Attomey General, or an Assistant Attorney 
General has requested that the FBI obtain prior approval for the use of consensual 
monitoring in a specific investigation. ' ` 


SPECIAL AGENT IN CHARGE: the Special Agent in Charge of an FBI field office 
(including an Acting Special Agent in Charge), except that the functions authorized for 
-Special Agents in Charge by these Guidelines may also be exercised by the Assistant 
Director in Charge or by any Special Agent in Charge designated by the Assistant 
Director in Charge in an FBI field office headed by an Assistant Director, and by FBI 
Headquarters officials designated by the Director of the FBI. 


SPECIAL EVENTS MANAGEMENT: planning and conduct of public events or 
activities whose character may make them attractive targets for terrorist attack. 
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STATE, LOCAL, OR TRIBAL: any state or territory of the United States or political 
subdivision thereof, the District of Columbia, or Indian tribe. 


THREAT TO THE NATIONAL SECURITY: 
i. intemational terrorism; 


2. espionage and other intelligence activities, sabotage, and aain, conducted 
by, for, or on behalf of foreign powers, organizations, or persons; 


3. foreign computer intrusion; and 


4, other matters determined by the Attorney General, consistent with Executive 
Order 12333 or a successor order. 


UNITED STATES: when used in a geographic sense, means all areas under the territorial 
sovereignty of the United States. 


UNITED STATES PERSON: 


Any of the following, but not including any association or corporation that is a foreign 
power as defined in Subpart G.1.-.3.: 


1. an individual who is a United States citizen or an alien lawfully admitted for 
permanent residence; 
2. an unincorporated association substantially composed of individuals who are 
United States persons; or 
3. a corporation incorporated in the United States. 


In applying paragraph 2., if a group or organization in the United States that is affiliated 
with a foreign-based international organization operates directly under the control of the 
international organization and has no independent program or activities in the United 
States, the membership of the entire international organization shall be considered in 
determining whether it is substantially composed of United States persons. If, however, 
thé U.S.-based group or organization has programs or activities separate from, or in 
addition to, those directed by the international organization, only its membership in the 
United States shall be considered in determining whether it is substantially composed of 
United States persons. A classified directive provides further guidance concerning the 
determination of United States person status. 








y. USE: when used with respect to human sources, means obtaining information from, 
tasking, or otherwise operating such sources. 





Date: ta T 28 


5 f i A a LA 
` Michael B. Mukasey 
Attorney General 
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EXECUTIVE ORDER 
12333 


UNITED STATES INTELLIGENCE ACTIVITIES 
DECEMBER 4, 1981 j 
(AS AMENDED BY EXECUTIVE ORDERS 13284 (2003), 13355 (2004) 
AND 13470 (2008)) 
PREAMBLE 
Timely, accurate, and insightful information about the 
activities, capabilities, plans, and intentions of foreign 
powers, organizations, and persons, and their agents, is 
essential to the national security of the United States. All 
reasonable and lawful means must be used to ensure that the 
United States will receive the best intelligence possible. For 
that purpose, by virtue of ‘the authority wasted in me by the 
. Constitution and the laws of the ‘United States of America, 
including the National Security Act of 1947, as amended, (Act) 
and as President of the United States of America, in order to 
provide for the effective conduct of United States intelligence 
activities and the protection of constitutional rights, it is 
hereby ordered as follows: | 
PART 1 Goals, Directions, Duties, and Responsibilities with 
Respect to United States Tatelligence Efforts 
1.1 Goals. The United States intelligence effort shall provide 
the President, the National Security Coùncil, and the Homeland 
Security Council with the necessary information on which. to base 
decisions concerning the development and conduct of foreign, 
defense, and economic policies, and the protection of 
United States national interests from foreign security threats. 
All departments and agencies shall cooperate fully to fulfill 
this goal. 
(a) All means, consistent with applicable Federal law and 
this order, and with full consideration of the rights of 


United States persons, shall be used to obtain reliable 


intelligence information to protect the Unitéd States and its 
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interests. 
(b) The United: States Government has a solemn obligation, 
and shall continue’in the conduct of intelligence activities 
under this order, to protect fully the legal rights of all 
United States persons, including freedoms, civil liberties, and 
privacy rights. guaranteed by Federal law. 
(c) Intelligence collection under this order should be 
guided by the need for information to respond to intelligence 
priořities set by the President. 
(d) ” Special emphasis should be given to detecting and 
countering: 
(1) Espionage and other threats and activities 
-directed by. foreign powers or their eieelsigenes 
services against the United Staka and its interests; 
(2) Threats ‘to the United States and its interests 
from terrorism; and , . 
(3) Threats to the United States and its interests 
Eron the develọpmėnt, possession, proliferation, or 
use of weapons of mass destruction. 
. (@) Special emphasis shall be given to the production 

of timely, accurate, and insightful reports, responsive to 

decisionmakers in the executive branch, that draw on all 

appropriate sources of information, including open source 

information, meet rigorous analytic standards, consider 

diverse analytic vienpointa, and accurately represent 

‘appropriate eteepaacive views. x . 

(£) State, local, and a govem are critical 
partners in securing and defending the United States from 
terrorism and other threats to the United States and its 
interests. Our national intelligence effort should take into 
account the responsibilities and requirements of State, local, 


and tribal governments and, as.appropriate, private sector 











entities, when undertaking the collection and dissemination of 


information and intelligence to protect the United States. 

(g) All departments and agencies have a responsibility 
to prepare and to provide intelligence in a manner that allows 
the full and free exchange of information, consistent with 
applicable law and presidential guidance. 

1.2 The National Security Council. 

(a) Purpose. The National Security Council (NSC) 
shall act as the highest ranking executive branch. entity that 
provides support to the President for review of, guidance 
for, and direction to the conduct of all foreign intelligence, 
counterintelligence, and covert’ action, and attendant policies 
and programs: 

(b) Covert Action and Other Sensitive Intelligence 
Operations. The NSC shall consider and submit to the President 
a policy recommendation, including all dissents, on each 
proposed covert action and conduct a periodic review of ongoing 
covert action activities, including an evaluation of the 
effectiveness and consistency with current national policy 
of such activities, and consistency with applicable legal 
requirements. The NSC. shall perform such other functions 
related to covert action as the. President may direct, but shall 
not undertake the conduct of covert actions. The NSC shall also 
review proposals for other sensitive intelligence operations. 
1.3 Director of National Intelligence. Subject to the 
authority, direction, and control of the President, the Director 
of National Intelligence (Director) shall serve as the head of 
the Intelligence Community, act as the principal adviser to the 
President, to the NSC, and to the Homeland Security Council 
for intelligence matters related to national security, and 
shall oversee and direct the implementation of the National 


Intelligence Program and execution of the National Intelligence 








Program budget., The Director will lead a unified, coordinated, 
and’ effective intelligence effort. In addition, the Director 
shall, in carrying out the duties and responsibilities under 
this section, take into account the views of the heads of 
departments containing an element of the Intelligence Community 
and of the Director of the Central Intelligence Agency.. 

(a) Except as otherwise directed by the President or 
prohibited by law, the Director shall have access to all 
inférmation and intelligence. described in section 1.5 (a) of this 
order. For the purpose of access to and sharing of information 
and intelligence, the Director: 

(1) Is hereby assigned the function under 
séctidn. 3(5) of the Act, to determine that intelligence, — 
regardless of the source. from which derived and including 
information gathered within: or outside the United States, 
pertains to more than one United States Government agency; and 

(2) Shall develop guidelines for how information 
or intelligence is providėd to or accessed by the Intelligence 
Community in accordance with section 1.5(a) of this order, and 
for how the information or intelligence may be used and shared 
by the Intelligence Community. All guidelines developed in 
accordance with this section shall be approved by the Attorney 
General and, where applicable, shall be consistent with 
guidelines. issuéd pursuant to section 1016 of the Intelligence 
Reform and Terrorism Protection Act of 2004 (Public Law 108-458) 
(IRTPA) . 

(b) In addition to fulfilling the obligations and 
responsibilities prescribed by the Act, the Director: 

(1) Shall establish objectives, priorities, and 
guidance for the Intelligence Community to ensure timély and 


effective collection, processing, analysis, and dissemination of 


intelligence, of whatever nature and from whatever source 














derived; 

(2) May designate, in consultation with affected 
heads of departments or Intelligence Community elements, one or 
more Intelligence Community elements to develop and to maintain 
services of common concern on behalf of the Intelligence 
Community if the Director determines such services can, be more 
efficiently or effectively accomplished in a consolidated 
manner; 

(3) Shall oversee and provide advice to the 
President and the NSC with respect to all ongoing and proposed 
covert action programs; 

(4) In regard to the establishment and conduct of 
intelligence arrangements and agreements with foreign 
governments and international organizations: 

(A) May enter into intelligence. and 
counterintelligence arrangements and agreements with foreign 
governments and international organizations; 

(B) Shall formulate policies concerning 
intelligence and counterintelligence arrangements and agreements 
with foreign governments and-international organizations; and 

(C) Shall align and synchronize intelligence and 
counterintelligence foreign relationships among ‘the elements of 
the Intelligence Community to further United States national 
security, policy, and intelligence objectives; 

(5) Shall participate in the development of 
procedures approved by the Attorney General governing criminal 
drug intelligence activities abroad to ensure that thése 
activities are consistent with foreign intelligence programs; 

(6) Shall establish common security and access 
standards for managing and handling intelligence systems, 
information, and products, with special emphasis on 


facilitating: 



























(a) The fullest and most prompt access to and 
dissemination of information and intelligence practicable, 
assigning the highest priority to detecting, preventing, 
preempting, and disrupting terrorist threats and activities 
FOE the United States, its interests, and allies; and 

(B) The establishment of standards fér an 
interoperable information sharing enterprise that facilitates 
the sharing of intelligence information among elements of the 
Intelligence Community; 

(7) Shall ensure: that appropriate departments and 
agencies have access to intelligence and receive ‘the support 
needed -to- perform independent analysis; 

(8) Shall protect, and ensure that programs are 
developed to protect, intelligence E methods, and 
activities from unauthorized disclosure; 

(9) ‘Shall, afteř consultation with the heads of 
affected departments and agencies, establish guidelines for , 
Intelligence Community elements for: 

(A) Classification and declassification of all 
intelligence and intelligence-related information Classified . 
under the authority of the Director or the authority of the head 
of a department or Intelligence Community element; and 

(B) Access to and dissemination of all 
intelligence and intelligence-related information, both PE 
final form and in the form when initially gathered, to include 

intelligence originally classified by the head of a department 
or Intelligence Community element, except that access to and 
dissemination of information-concerning United States persons 
shall be governed by procedures developed in accordance with 
‘Part 2 of this order; 

(10) May, only with respect to Intelligence 


Community elements, and after consultation with the head of the 














originating Intelligence Community elément or the head of the 
originating department, declassify, or direct the 
declassification of, information or intelligence rélating to 
intelligence sources, methods, and activities. The Director may 
only delegate this authority to tħe Principal Deputy Director of 
National Intelligence; 

(11) May establish; operate, and direct one or more 
national intelligence centers to address intelligence 
priorities; 

(12) May establish Functional Managers and Mission 
Managers, and designate officers or employees of thé 
United States to serve in these positions. 

(A) Functional Managers shall report to the. 

Director concerning the execution of their duties as Functional 
Managers, and may be chargéd with developing and implementing 
strategic guidance, policies, and procedures for activities 
related to a specific intelligence discipline or set of 
intelligence activities; set training and tradecraft standards; 
and ensure coordination within and across intelligence 
disciplines and Intelligence Community elements and with related 
non-intelligence activities. Functional Managers may also 
advise the Director on: the management of E E 
and procedures; collection capabilities and gaps; -processing and 
diweaminseienr ae intelligence; technical architectures; and 
other issues ‘or activities detetainad by the Director. 

(i) The Director of the National 
Security Agency is designated the Functional Manager for signals 
intelligence; | i 

(ii) The Director of the Central 
intelligence Agency is designated the Functional Manager for 


human intelligence; and 


(iii) The Director of the National 














Geospatial~Intelligence Agency is designated the Functional 


Manager for geospatial intelligence. 






(B) Mission Managers shall serve as principal 






substantive advisors on all or specified aspects of intelligence 






related to designated countries, regions, topics, or functional 






issues; 





(13) Shail establish uniform criteria for the 






determination of relative priorities for the transmission of 


= 






critical foreign intelligence, and advise the Secretary of 






Defense concerning the communications requirements of the 






Intelligence Community for the transmission of such 






communications; 


(14) Shall have ultimate responsibility for 






production and dissemination of intelligence produced by the 






A Intelligence Community and authority to levy analytic tasks on 






‘intelligence production organizations within the Intelligence 






Community, in consultation with the heads of the Intelligence 





Community elements concerned; 






(15) May establish advisory groups for the purpose 






of obtaining advice from within the Intelligence Community to 






Carry out the Director's responsibilities, to include 






intelligence Community executive ‘management committees composed 






of senior Intelligence Community leaders. . Advisory groups shall 






consist of reptesentatives from elements of the Intelligence 






Community, as designated by the Director, or other executive 






branch departments,’ agencies, and offices, as appropriate; 






(16) Shall ensure the timely exploitation and 





dissemination of data gathered by national intelligence Í 






collection means, and ensure that the resulting intelligence is 






disseminated immediately to appropriate government elements, 






including military commands; 






(17) Shall determine requirements and priorities 














for, and manage and direct the tasking, collection, analysis, 
production, and dissemination of, national intelligence by 
elements of the Intelligence Community, including approving 
requirements for collection and analysis and resolving conflicts 
in collection requirements and in the tasking of national 
collection assets of Intelligence Community elements (except 
when otherwise directed by the President or when the Secretary 
of Defense exercisés collection tasking authority under plans: 
and arrangements approved by the Secretary of Defense and the 
Director) ; 

(18) May provide advisory tasking concerning 
collection and analysis of information or intelligence relevant 
to national intelligence or national security to departments, 
agencies, and establishments of the. United States Government 
that are not eléments of the Intelligence Community; and shall 
establish 

procedures, in consultation with affected heads of 
departments or agencies and subject to approval by the Attorney 
General, to implement this authority and to monitor or evaluate 
the responsivéness of United States Government departments, 
agencies, and other establishments; 

(19) Shall fulfill the responsibilities in 
section 1.3(b) (17) and (18) of this order, consisten with 
applicable law and with full consideration ‘of the rights of 
United States persons, whether information is to be collected 
inside or outside the United States; 

(20) Shall ensure, through appropriate policies and 
procedures, the deconfliction, coordination, and integration of 
all intelligence activities conducted by an Intelligence 
Community element or funded ‘by the National Intelligence 
Program. In accordance with these policies and procedures: 


{A) The Director of the Federal Bureau of 











Investigation shall coordinate the clandestine collection of 
foreign intelligence collected. through human sources or through 


human~enabled means and counterintelligence activities inside 


the United: States; 


(B) The Director of the Central Intelligence 
Agency shall coordinate the clandestine collection of foreign 
intelligence collected through human sourcés or through human- 
enabled means and counterintelligence activities outside the 
United States; 

(C) All policies and procedures for the 
coordination of counterintelligence activities and the 
clandestine collection of foreign intelligence inside thé 


United States shall be subject to the approval of the Attorney 


General; and 


(D) All policies and procedures developed under 
this section shall be coordinated with the heads of affected 
departments and Intelligence Community elements; 


(21) Shall, with the .concurrence of the heads of 


affected departinents and agencies, establish joint procedures to 


deconflict, coordinate, and synchronize intelligence activities 
conducted by an Intelligence Community element or funded by the 


National Intelligence Program, with intelligence activities, 


activities that involve foreign intelligence and security 
services; or activities that involve the use of clandestine 
methods, conducted by other United States Government 
departments, agencies, and establishments; | 

(22) ‘Shall, in coordination with the heads of 
departments containing elements of the Intelligence Community, 
develop procedures: to govern major system acquisitions funded in 
whole or in majority part by the National Tntelligance Program; 

(23) Shall seek advice from the Secretary of State 


to ensure that the foreign policy implications of proposed 


10 












intelligence activities are considered, and shall ensure, 


through appropriate policies and procedures, that intelligence 






activities are conducted in a mannér consistent with the 






responsi 






bilities pursuant to law and presidential direction of 





Chiefs of United States Missions; and 







(24) Shall facilitate the use of Intelligence 





Community products by the Congress in a secure manner. 







(c) The Director's exercise of authorities in the 





Act and this order shall not abrogate the statutory or 






other responsibilities of: the- heads. of departments of the 






United States Government or thè Director of the Central 





Intelligence Agency. Directives issued and actions taken by 






the Director in thé exercise of the. Director's authorities 






and responsibilities to integrate, coordinate, and make the 






Intelligence Community more effective in providing intelligence 






related to national security shall be implemented by the 






elements of the Intelligence Community, provided ‘that any 






department head whose department contains an element of the 






Intelligence ‘Community and who believes that a directive or 





action of the Director violates the requirements of section 1018 





of the IRTPA or’ this subsection shall bring the issue to the 





attention of the Director, the NSC, or the President for 





resolution in a manner that respects and does not abrogate the 





statutory responsibilities of the heads of the departments. 







(d) Appointments to certain positions. 







(1) The relevant department ‘or buréau head shall 





provide recommendations and obtain. the concurrence of the ` 






Director for the selection of: the Director of the National 







Security Agency, the Director of the National Reconnaissance 





Office, 






the Director of the National Geospatial-Intelligence 






Agency, the Under Secretary of Homeland Security for 






intelligence and Analysis, the Assistant Secretary of State for 











Intelligence and Research, the Director of the Office of 
Intelligence and Counterintelligence of the Department of 
Energy, the Assistant Secretary for Intelligence and Analysis of 
the Department of the Treasury, and the Executive Assistant 
Director for the National Security Branch of the Federal Bureau 
of Investigation. If the Director does not concur in the 
recommendation, the department head may not fill the vacancy or 
make the recommendation to the President, as the case may be. 
If the department head and the Director do not reach an 
agreement on the selection or recommendation, the Director and 
the department head concerned may advise the: President directly 
of the Director's intention to withhold concurrence. 

(2) The relevant department head shall. consult. with 
the Director before appointing an individual to fill a vacancy 
or recommending to the President an individual be nominated to 
fill a vacancy in any of the following positions: the Under 
Secretary of Defense for Intelligence; the Director of the 
Defense Intelligence Agency; uniformed beads of the intelligence 
elements of the Army, the Navy, the Air FörGe; and the Marine 
Corps above the rank of Major General or Rear Admiral; the 
Assistant Commandant of the Coast Guard for Intelligence; and 
the Assistant Attorney General for National Security. 

(e) Removal from certain positions. 

(1) Except for the Director of the: Central 
Intelligence Agency, whose removal the Director E to 
the President, the Director and the, gellevant depactnané head 
shall consult on ‘the removal, or recommendation to the President 
for removal, as the case May be, of: the Director of the 
National Security Agency, the Director of the National 
Geospatial~Intelligence Agency, the Director of the Defense 
Intelligence Agency, the Under Secretary of Homeland Security 


For Intelligence and Analysis, the Assistant Secretary of State 
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for Intelligence and Research, and the Assistant Secretary for 


Intelligence and Analysis of the Department of the Treasury. If 
the Director and the department head do not agree on removal, or 
recommendation for removal, either may make a recommendation to 
the President for the removal of the individual. 

(2) The Director and the relevant department or 
bureau head shall consult on the removal of: the Executive $ 
Assistant Director for the National Security prenen of the 
Federal Bureau of Investigation, ‘the Director of the Office of 
Intelligence and. Counterintelligence of the Department of' ” 
nergy, the Director of the National Reconnaissance Office, 
the Assistant Commandant of the Coast Guard for A A 
and the’ Under Secretary of Defense for Intelligence. With 
respect to an individual appointed by a department head, the 
department .head may remove the individual upon the request of 
the Director; if the department head chooses not to somove the 
individual, either the Director or the deparenan® head may 
advise the President of the department head's intention to 
retain the individual. In.the case of the Under Secretary of 


` 


Defense for Intelligence, the Secretary of Defense may recommend 
to the President either the removal or the retention of the 
individual. For uniformed’ heads’ of the intelligence elements of 
khe Army, the Navy, the Air Force, and the Marine Corps, the 
Director may make a recommendation for removal to the Secretary 
of Defense. 

(3) ‘Nothing in this subsection shall be construed 
to limit or otherwise affect the authority of the President to 
nominate,, appoint, assign, or terminate the appointment or 
assignment of any individual, with-or without a consultation, 
recommendation, or concurrence. 
1.4 The Intelligence Community. Consistent with applicable 


Federal law and with the other provisions of this order, and 
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under the leadership of the Director, as specified in such law 


and this’ order, the Intelligence Community shall: 

(a) Collect and provide information needed by the 
President and, in the performance of executive functions, the 
Vice President, the NSC, the Homeland Security Council, the 
Chairman of. the Joint Chiefs of Staff, senior military 
commanders, and other eeue branch officials and, as 
appropriate, the Congress of- the United States; T 

(b) In accordance with priorities set by the President, 
collect teeta tae concerning, and conduct activities to 
protect against, international terrorism, proliferation of 
weapons of mass destruction, intelligence aetivicies directed 
against the United States, international criminal drug 
activities, and other ‘hostile activities directed against the 
United States by foreign powers, organizations, persons, and 

ae agents; 

(c) Analyze, produce, and disseminate intelligence; 

(d) Conduct administrative, technical, and other support 
activities within the United States and abroad necessary for 
the errors of authorized activities, to include providing 
services of common concern for the Intelligence Community as 
designated by the Director in accordance with this order; 

(e) Conduct research, development, and procurement of 
technical systems and devices relating to authorized functions” 
and missions or the provision of services of common, concern for 

_the Intelligence “onnuniEy 

(f) Protect the security of intelligence related 
activities, information, installations; property, and employees 
by appropriate means, including such investigations of 
applicants, employees, contractors, and other persons with 


similar associations with the Intelligence Community elements as - 


are necessary; 
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(g9) Take into account State, local, and tribal 


governments.’ and, as appropriate, private sector entities’ 
information needs relating to national and homeland security; 

(h) Deconflict, coordinate, and integrate all intelligence 
activities and other information gathering in accordance with 
section 1.3(b) (20) of this order; and 
(i) Perform such other functions and ‘duties related to 
intelligence activities as the President may direct. 

1.5 Duties and Responsibilities of the Heads of Executive 
Branch Departments and Agencies. The heads of all departments 
and agencies shall: 

(a) Provide the Director access to all information and 
intelligence relevant to the national security or that otherwise 
is. required- for -the performance of the Director's duties, 
to include administrative and other appropriate management 
information, except such information excluded by law, by the 
President, or by the Attorney General acting under this order 
at the direction of the President; 

: (b) Provide all programmatic and budgetary information 
necessary to support the Director in developing the National 
Intelligence Program; 

(c) Coordinate development and implementation of 
‘intelligence systems and architectures and, as appropriate, 
Operational systems and architectures of their departments, 
agencies, and other elements with the Director to respond 
to national intelligence requirements and all applicable 
information sharing and security guidelines, information 
privacy, and other legal requirements; 

{d) Provide, to the maximum extent permitted by 
law, subject to the availability of appropriations and not 
inconsistent with the mission of the department or agency, such 


further ‘support to the Director as the Director May request, 
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after consultation with the head of the department or agency, 


for the performance of the Director's functions; 

(e) Respond to advisory tasking from the Director 
under section 1.3(b) (18) of this order to the greatest extent 
possible, in accordance with applicable a established 
by the head of the responding department or agency; 

K (£) Ensure that all elements within the department 
or agency comply with the provisions of Part 2 of this order, 
regardless of Intelligence Community affiliation, when 
performing foreign intelligence and counterintelligence 
functions; 

o Deconflict, coordinate, and integrate all 
intelligénce activities in accordance with section 1.3(b) (20), - 
and “intelligence and other activities in accordance with 
section 1.3(b) (21) of this order; 

(h) Inform the Attorney General, either directly or 
through the Federal Bureau of Investigation, and the Director 
of clandestine collection of foreign intelligence and 
counterintelligence RT inside the United States nee 
coordinated with the Federal Bureau of Investigation; 

(i) Pursuant to aane developed by the head of 
the department or agency and the Director of the. Central 

, Intelligence Agency and approved by the- Director, inform the 
Director and the Director of the Central Intelligence Agency, 
-either directly or through his designee serving outside: the 
United States, aS appropriate, -of clandestine collection of 
foreign intelligence collected through human sources or through 
human-enabled means outside the United States that has not been 
coordinated with the Central Intelligence Agency; and 

(j) Inform the Secretary of Defense, either directly or 


through his designee, .as appropriate, of clandestine collection 


of foreign intelligence outside the United States in a region of 











combat or contingency military operations designated by the 
Secretary of Defense, for purposes of this paragraph, after 
consultation with the Director of National Intelligence. 

1.6 Heads of Elements of the Intelligence Community. The heads 
of elements of the Intelligence Community shall: 

(a) Provide the Director access to all information and 
intelligence relevant to the national security or that otherwise~ 
is required for the performance of the Director's duties, 
to include administrative and other appropriate management 
information, except ‘such information excluded by law, by the 
President, or by the Attorney General acting under this order 
‘at the direction of the President; 

(py Report to the Attorney General possible violations 
of Federal criminal laws by employees and of specified Federal 
criminal laws by any other person: as provided in procedures 
agreed upon by the Attorney ‘General and the head of the: 
department, agency, or establishment concerned, in a manner 
consistent with. the protection of intelligence sources and 
methods, as specified in those procedures; 

(c) Report to thé Intelligence Oversight Board, consistent 
with Executive Order 13462 of February 29; 2008, and provide 
‘copies of all such reports to the Director, concerning any 
intelligence activities of their elements that they have reason 
to believe may be unlawful or contrary to executive order or 
presidential directive; 

(d) Protect intelligence and intelligence sources, 
methods, and activities from unauthorized -disclosure in 
accordance with qutdance from the Director; 

(e) Facilitate, as appropriate, the sharing of information 
or intelligence, as directed’ by law or the President, to State, 
local, tribal, and private sector entitiés; 


(£)) Disseminate information or intelligence to foreign 
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governments and international organizations under intélligence 


or counterintelligence arrangements or agreements established in 
accordance with section 1.3(b) (4) of this order; 

(g) Participate in the development of procedures approved 
by the Attorney General governing production and dissemination 
of information or intelligence resulting from criminal drug 
intelligence activities abroad if they have intelligence 
responsibilities for foreign or domestic criminal drug 
production and trafficking; and 

(h) Ensure that the inspectors general, general counsels, 
and agency officials responsible for privacy or civil liberties 
protection for their respective. organizations have access to any 
information or intelligence necessary to perform their official 
duties. . . . i, 

1.7 Intelligence Community Elements. Each element ọf 

the Intelligence Community shall have the duties and 
responsibilities specified below, in: addition tó those 
specified by law or elsewhere in this order. Intelligence 
Community elements within executive departments shall serve the 
information and intelligence needs o£ their respective heads. 
of departments and also shall operate as part of an integrated 
Intelligence Community, as provided in law or this order. 

(a) THE CENTRAL INTELLIGENCE AGENCY. The Director of the 
Central Intélligence Agency shall: i 

(1) Collect (including through clandestine means), 
analyze, produce, and disseminate foreign intelligence and. 
counterintelligence; 

(2) Conduct counterintelligence activities without 
assuming or performing any internal security functions within 
the United States; 

(3) Conduct administrative and technical support 


activities within and outside the United ‘States as necessary for 












































cover and proprietary arrangements; 

(4) Conduct covert action activities approved by the 
President. No agency except the Central Intelligence Agendy (or 
the Armed Forces of ‘the United States in time of war declaved by 
the Congress or during any period covered by a report from |the 
President tò the ‘Congress consistent with the War Powers. 
Resolution, Public Law 93-148) may conduct any covert actio 

activity unless the President determines that another agence) 
more likely to achieve a Particular objective; 

(5) Conduct foreign intelligence liaison 
relationships with intelligence or security services of fork 
governments or intèrnational organizations consistent with 
section 1.3(b) (4) of this order; 

{6) Under the diréction and guidance of the Diredi 
and in accordance with section 1.3(b) (4) of this order, 
coordinate the implementation of intelligence and 
E relationships between elements of thè 
Intelligence Community and the intelligence or security ser 
of foreign governments or international organizations; and 

(7) Perform such other functions and duties relatka 
to intelligence as the Director may direct. 

(b) THE DEFENSE INTELLIGENCE AGENCY. The Director of the 
Defense Intelligence Agency shall: 

(1) Collect (including through clandestine means) , 
analyze, produce, and disseminate foreign intelligence and 
counterintelligence to support national and departmental 
missions; 

(2) Collect,- analyze, produce, or, through taskin 
and coordination, provide defense and defense-related 
intelligence for the Secretary of Defence, 


the Chairman of th 


Joint Chiefs of Staff, -combatant commanders, other Defense 


components, and non-Defense agencies; 
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(3) Conduct counterintelligence activities; 


(4) Conduct administrative and technical support 
activities within and outside the United States as necessary for 
cover and proprietary arrangements; | 
. (5) Conduct foreign défense intelligence aison 

relationships and defense intelligence exchange programs with 
-foreign defense establishments, intelligence or security 
services of foreign governments, and international organizations 
in accordance with sections 1.3(b) (4), 2.7 (a) (6), and 1.10(i) of 
this order; 

(6) Manage and coordinate all matters related to the 
Defense Attaché system; and 

. (7) Provide foreign intelligence and ; ` ‘ 3 ' 
‘counterintelligencé staff support as directed by the Secretary 
of Defense. 
te) THE NATIONAL SECURITY AGENCY. The Director of the 
National Security Agency shall: ' 

(1) Collect (including through clandestine means), 
process, analyze, produce, and disseminate signals intelligence 
information and data for foreign intelligence and 
counterintelligence purposes to support national and 
departmental missions; 

(2) Establish and operate an effective unified 
organization for signals intelligence activities, except for the 
delegation of Operational control over certain operations that 

-are conducted through other elements of the Intelligence 
Community. No other department or agency may engage in signals 
intelligence activities except pursuant to a delegation by the 
Secretary of Defense, after coordination with the Director; 

(3) Control sienais intelligence collection and 
processing activities, including assignment of resources to an 


appropriate agent for such ‘periods and. tasks as required for the 
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direct support of military commanders; 


(4) Conduct administrative and technical support 
activities within and outside the United States as necessary for 
cover arrangements; 

(5) Provide signals intelligence support for national 
and departmental requirements and for the conduct of military 
operations; 

(6) Act as the National Manager for National Security 
Systems as established in law and policy, and in this capacity 
be responsible to the Secretary of Defense and to the Director; 

(7) Prescribe, consistent with section 102A(g) of 
the Act, within its field of authorized operations, security 
regulations covering operating practices, including the 
transmission, hand¥ing, and distribution of signals intelligence 
and comminications security material within and amog the 
elements under control of the Director of the National Security 
Agency, and exercise the necessary supervisory control to ensure 
compliance with the regulations; and 

(8) Conduct foreign cryptologic liaison relationships 
in accordance with sections 1.3(b) (4), 1.7(a) (6), and 1.10(i) of 
this order. i l 

(d) THE NATIONAL RECONNAISSANCE OFFICE. The Divector of 
the National Reconnaissance Office shall:. 

(1) Be. responsible for research and development, 
acquisition, launch, deployment, and operation of overhead 
Systems and related data processing. facilities to collect 
intelligence and information to support national and 
departmental missions and other United States Government needs; 
and 

(2) Conduct foreign liaison relationships relating 
to the above missions, in accordance with sections 1.3(b) (4), 


1.7{a) (6), and 1.10(i) of this order. 
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(e) THE NATIONAL GEOSPATIAL-INTELLIGENCE AGENCY. The 
Direc Lor of the National Geospatial-Intelligence Agency: shall: 
(1) Collect, process, analyze, produce, and 
disseminate geospatial intelligence information and data for 
foreign intelligence and counterintelligence purposes to support 


national and departmental missions; 


(2) Provide geospatial intelligencé support for 
national and departmental requirements and for the conduct of 


military operations; 


(3) Conduct administrative and technical support 


activities within and outside the United States as necessary for 


cover arrangements; and 


(4) Conduct foreign ‘geospatial intelligence liaison 
relationships; in accordancé with sections 1.3(b) (4), 1.7(a) (6), 


and 1.10(i) of this order. 


(£) THE INTELLIGENCE. AND COUNTERINTELLIGENCE ELEMENTS OF 


THE ARMY, NAVY, AIR FORCE, AND MARINE CORPS. ‘The Commanders and 


heads’ of the intelligence and counterintelligence elements of 
the Army, Navy, Air Force, and Marine Corps shall: 


(1) Collect (including through clandestine means), 


produce, analyze, and disseminate défense and defense-related 


intelligence and counterintelligence to Support departmental 


requirements, and, as appropriate, national requirements; 


(2) Conduct counterintelligence activities; 


(3) Monitor the development, procurement, and 


management of tactical intelligence Systems and equipment and 


conduct related research, development, and test and evaluation 
activities; and 
44) Conduct military intelligence liaison 


relationships and military intelligence exchange programs with 


selected cooperative foreign. defense establishments and 


international organizations in accordance with 








sections 1.3(b) (4), 1.7(a) (6), and 1.10(i) of this order. 






(g) INTELLIGENCE ELEMENTS OF THE FEDERAL BUREAU OF 





INVESTIGATION. Under the supervision. of the Attorney General 







and pursuant to such regulations as the Attorney General ‘may 






establish, the intelligence elements’ of the Federal Bureau of 






Investigation shall: 





(1) Collect (including through clandestine means), 






analyze, produce, and disseminate foreign intelligence and 






counterintelligence to support national and departmental 






. missions, in accordance with Procedural guidelines approved by 






the Attorney General, after consultation with the Director; 


(2) Conduct counterintelligence activities; and 









(3) Conduct foréign intelligence and. — - 





counterintelligence liaison relationships with intelligence, 






security, and law enforcement services of foreign governments or 






international organizations in accordance with 






sections 1.3(b).(4) and 1.7 (a) (6). Of this: order. 







(h) THE INTELLIGENCE AND COUNTERINTELLIGENCE ELEMENTS OF 






THE COAST GUARD. The Commandant of the Coast Guard shall: 






{1) Collect (including through clandestine means), 





analyze, produce, and disseminate foreign intelligence and 






counterintelligence including défense and defenSe-related 






information and intelligence to Support. national .and 






departmental missions; 







(2) Conduct counterintelligence activities; 







(3) Monitor the development, procurement, and 






management of tactical 






intelligence systems and equipment and . 





condict related research, development, and. test and evaluation 






activities; and 







(4) Conduct foreign intelligence liaison 





relationships and intelligence exchange programs with foreign 






intelligence services, security services or international 






































organizations in accordance with sections 1.3(b) (4), 1.7{a) (6), 
and, when operating as part of the Department of Defense, 
1.10(i) of this order. 
(i) THE BUREAU OF INTELLIGENCE AND RESEARCH, DEPARTMENT OF 
STATE; THE OFFICE OF INTELLIGENCE, AND ANALYSIS, DEPARTMENT OF 
THE TREASURY; THE OFFICE OF NATIONAL SECURITY INTELLIGENCE, DRUG. 
: s ENFORCEMENT ‘ADMINISTRATION; THE OFFICE OF INTELLIGENCE AND 
ANALYSIS, DEPARTMENT OF HOMELAND SECURITY; AND THE OFFICE OF © 
INTELLIGENCE AND COUNTERINTELLIGENCE, DEPARTMENT OF ENERGY. 
The heads of the Bureau of Intelligence and Research, Department 
of State; the Office of Intelligence and Analysis, Department 
of the Treasury; the Office of National Security Intelligence, 
Drug Enforcement Administration; the Office of Intélligence and- 
Analysis, Department of Homeland Security; and the Office of 
Intelligence and Counterintelligence, Department. of Energy 
shall: 

(1) Collect (overtly or through publicly available 
sources), analyze, produce, and disseminate information, ; 
intelligence, and counterintelligence to Support national and 
departmental missions; and 

(2) Conduct and participate, in analytic or i 

information exchanges with foreign partners and international 
organizations in accordance with sections 1.3(b).(4) and 
2 1.7(a) (6) of this order. 

(j) THE OFFICE OF THE DIRECTOR OF NATIONAL INTELLIGENCE. 
The Director shail collect (overtly or through publicly 
available sources), analyze, produce, and’ disseminate 
information, intelligence, and counterintelligence to support 
the missions of the Office of the Director of National 
Intelligence, including the National Counterterrorism Center, 


and to support other national missions. 


1.8 The Department of State. In addition to the authorities 











exercised by the Bureau a Intelligence and Research under 
sections 1.4 and 1,7(i) of this order, the Secretary of State 
shall: 

(a) Collect (overtly or through publicly available 
sources) information relevant to United States foreign policy 
and national security conceris; 

(b) Disseminate, to the maximum extent possible, reports 
received from United States diplomatic and consular posts; 

(c) Transmit Foreca aE: and advisory taskings 
of the Intelligence Community to the Chiefs of United States 
Missions abroad; and 

(d) Support Chiefs of United States Missions in 
discharging their responsibilities pursuant to law and 
presidential direction. i 
“1.9 The Department’ of the Treasury. In addition to the 
authorities exercised by the Office of Intelligence and Analysis 
of the Department of .the Treasury under sections 1.4 and 1.7(i) 
of this order the Secretary of the Treasury shall collect 
(overtly or through publicly available sources) foreign 
‘financial information and, in consultation with the. Department 
of State, foreign economic: information. 

1.10 The Department of Defense. The Secretary of .Defense 
shall: 

(a) Collect (including through clandestine means), 
analyze, Produce, and disseminate information and intelligence 
and be responsive to collection tasking and advisory tasking by 
the Director; 

(b) Collect (including through clandestine means), 
analyze, produce, and disseminate defense and defense- relatad 
intelligence and counterintelligence, as required for execution 
of the Secretary's responsibilities; 


(c) Conduct programs and missions necessary to fulfill 
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national, departmental, and tactical intelligence requirements. 

(d) Conduct counter ineetiyenee activities in support 
of Department of Defense components and coordinate 
counterintelligence activities in accordance with 
section 1.3(b) (20) and (21)- of this order; 

te) Act, in coordination with the Director, as the 
executive agent of the United States Government fox signals 
intelligence activities: 

(£) Provide fox tha timely transmission of critical 
intelligence, as defined by the Director, within the 
United States Government; l 

(g) ‘Carry out or contract for research, development, 
and procurement of technical systems and devices relating to 
“authorized intelligence functions; 

(h) Protect the sécurity of Department of Defense 
installations, activities, information, property, and 
employees by appzepriate means, including such ‘investigations 
of applicants, employees, contractors, and. other persons with 
similar associations with the Department of Defense as are 
necessary; 

(i). Establish and maintain defense intelligence 
relationships and defense intelligence exchange programs 
with selected. cooperative foreign defense establishments, 
intelligence or security services of foreign governments, and 
international E aR AA and ensure that such relationships 
and programs at in accordance with sections 1.3 (b) t4), 

1.3(5) (21) and 1.7(a) (6) of this order; 

(j) Conduct such administrative and technical support 
activities within and outside the United States as are necessary 
to provide for cover and proprietary arrangements, to perform 
the functions described in sections (a) though (i): -aheees, and to 


Support the Intelligence Community elements of the Department of 
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Defense; and 


(k) Use the Intelligence Community elements within the 
Department of Defense identified in section 1.7(b) through (£) 
and, when the Coast Guard is operating as part of the Department 
of Defense, 

(h) above to carry out the Secretary of Défense's 
responsibilities assigned in this section or other departments, 
agencies, or Offices within the Department of Defense, as 
appropriate, to conduct the intelligence missions and 
responsibilities assigned to the Secretary of Defense. 

1.11 The Department of Homeland’ Security. In addition to the 
authorities exercised by the Office of Intelligence and Analysis 
of the Department of Homeland Security under sections 1.4 and 
“1.7(i) of this order, the Secretary of Homeland Security shall 
conduct, through the United States Secre Service, activities to 
determine the existence and capability of surveillance equipment 
being used against the President or the Vice President of the 
United States, the Executive Office of the President, and, 

as authorized'by the Secretary of Homeland Security or the 
President, other Secret Service protectees and United States 
officials. No information shall be acquired intentionally 
through such activities except to protect against use of such 
Surveillance equipment, and those activities shall be conducted 
pursuant to procedures agreed upon by the Secretary of Homeland 
Security and the Attorney General. 

1.12 The Department of Energy. in addition to the authorities 
exercised by the Office of Intelligence and Counterintelligence 
of the Department of Energy under sections 1.4 and 1.7(i) of 
this order, the Secretary of Energy shall: 

(a) Provide expert scientific, technical, analytic, and 


research capabilities to other agencies within the Intelligence , 


Community, as appropriate; 











(b) Participate in formulating intelligence collection and 
analysis requirements where the special expert capability of the 
Department can contribute; and 

(c) Participate with the Department of State in overtly 
collecting information with respect to foreign energy matters. 
1.13 The Federal Bureau of Investigation. :In addition to the 
authorities exercised by the intelligence elements of the 
Federal Bureau of Investigation of the Department of Justice 
under sections 1.4 and 1.7(g) of this order and under the 
supervision of the Attorney General and pursuant to such 
regulations as. the Attorney General may establish, the Director 
of the Federal Bureau of Investigation shall provide technical 
assistance, within or outside the United States, to foreign 
intelligence and: law enforcement SerVicés, consistent with 
section 1.3(b) (20) and (21) of this order, as. may be necessary 
to support national or departmental missions. 

PART 2 - Conduct of Intelligence Activities 

2.1 Need. Timely,. accurate, and insightful information about 
the activities, capabilities, plans, and intentions of foreign 
powers, organizations, and persons, and their agents, is 
essential to informed decisionmaking in the areas of national 
security, national défense, and foreign relations. Collection 
of such information is a priority objective and will be pursued 
in a vigorous, innovative, and responsible manner that is 
consistent with the Constitution and applicable law and 
respectful of the principles upon which the United States was 
founded. l 

One Purpose. This Order is intended to enhance human and 
technical collection techniques, especially those undertaken 
abroad, and the scontazties of significant foreign ocell igence, 
as well as the detection and countering of international 


terrorist activities, the spread of weapons of mass destruction, 
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and .espionage conducted by foreign powers. Set forth below are 


certain general principles that, 





in addition to and consistent 





with applicable laws, 






are intended to achieve the proper balance 






between the acquisition of essential information and protection 






of individual interests. Nothing in this Order shall be 






construed to apply -to or interfere with any authorized civil or 






criminal law enforcement responsibility of any department or 






agency. 






2.3 Collection of information. ‘Elements of the Intelligence 





Community are authorized to collect, retain, ór disseminate 






information concerning United States persons only in accordance 






with procedures established by the head of the Intelligence 






Community, element concerned or by the head. of a- department 






containing such element and approved by the Attorney General, 






consistent with the authorities provided by Part 1 of this 






Order, after consultation with the Director. 





Those -procedures 





shall permit collection, retention, and dissemination of the 






following, types of information: 






(a) Information that, is. publicly available or collected 






with the consent of the person concerned; 






(b) Information constituting foreign intelligence or 





counterintelligence, including such information concerning 





corporations or other commercial Organizations. 





Collection: 






-within the United’ States of foreign intelligence not otherwise 






obtainable shall be undertaken ‘by the Federal Bureau of 






Investigation (FBI) or, 





when’ significant foreign intelligence is 





sought, by other authorized elements of 





the Intelligence 





Community, provi 





ded that no foreign intelligence collection by 






such elements may be undertaken for the purpose of acquiring 






information concerning the domestic activities of United States 





persons; 





tc) Information obtained in the course of a lawful foreign 
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intelligence, counterintelligence, international drug or 


international terrorism investigation; 


{d) Information -needéd to protect the safety of any persons 


or organizations, including those who are targets, victims, or 


hostages of international terrorist organizations; 


(e) Information needed to protect foreign intelligence or: 
counterintelligence sources, methods, and activities from 
unauthorized disclosure: Collection within the United States 


shall be undertaken by the FBI except that other elements of the 
Intelligence Community may also collect such information 


concerning preseht or former émployees, present or former 


intelligence element contractors or their present or former 
employees, or applicants for such saptowiene or contracting; 
(£)- Information concerning pérsons who are reasonably | 
believed to be potential sources or contacts for the purpose of 
determining their suitability or credibility; 
(g) taformacion arising out of a lawful personnel, 


physical, or communications security investigation; 


(h) Information acquired by overhead reconnaissance not 


directed at specific United States persons; 


(i) Incidentally obtained information that may indicate 


involvement in activities that may violate Federal, state, 


‘local, or foreign laws; and 


(3) Information necessary for administrative purposes. 


In addition, elements of the Intelligence community may 


disseminate information to each appropriate element within the 


Intelligence Community for purposes of allowing the recipient 


element to determine whether the information is relevant to its 
responsibilities and can be retained by it, except that 
information derived from signals intelligence may only be 


disseminated or made available to Intelligence Community 


elements in accordance with procedures established by the 
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Director in, coordination with the Secretary of Defense and 
approved by the Attorney General. : 

2.4 Collection Techniques. Elements of the Intelligence 
Community shail tee the least intrusive collection techniques 
feasible within the United States or directed against 

United States persons abroad. Elements of the Pace dEegence 
Community are not authorized to use such techniques as 
electronic surveillance, unconsented physical searches, ‘mail 
Surveillance, physical surveillance, or monitoring ‘devices 
unless they are in accordance with procedures established by the 
head of ‘the Intelligence .Community element concerned or the head 
of a departmént containing such element and approved by the 
Attorney General, after consultation with the Director. Such 
procedures shall protect constitutional and other legal rights 
and limit use of such information to lawful governmental 
purposes. These procedures $hall'not authorize: 

(a) The Central Intelligence Agency (CIA) to engage in 
electronic surveillance within the United States except for the 
purpose of training, testing, or conducting on e AnaS to 
hostile electronic surveillance; 

(b) Unconsented physical searches in the United States by 
elements of the intelligence Community other than the FBI, 
except for: 

l (1). Searches by counterinteliigeica elements of the 
military services directed anse military personnel within the 
United States or abroad for intelligence purposes, when 
authorized by a military commander empowered to approve physical 
searches for ‘law enforcement purposes, based upon a finding of 
probable cause to believe that such persons are acting as agents 
of foreign powers; and 

(2y bestcnes by CIA of personal property of non- . 


United States persons lawfully in its possession; 











(c) Physical surveillance 6f a United States person in the 


United States by elements of the Intelligence Community other 
than the a except for: . 

(1) Physical surveillance of present or former 
employees, present or former intelligence element contractors or 
their present or former employees, or applicants for any such 
employment or contracting; and 

(2) Physical surveillance of a military person , 
eniployed by a non-intelligence element of a military service; 
and 

(d) E A of.a. United States person abroad 
to collect foreign intelligence, except to obtain significant 

information that cannot reasonably. be acquired ‘by other means. 

2.5 Hetomeay-Goness? Approval. The Attornéy General hereby is 
delegated the power to approve the use for intelligence 
purposes. within the United States or against a United States 
person abroad, of any technique for which a warrant would be 
required if undertaken for law enforcement purposes, provided 
Ehag Such techniques shall not -be undertaken ines the Attorney 
General has determined in each case that there is probable cause 
to believe that the technique is directed against a foreign 
Power or an agent of a foreign power. The authority delegated 
pursuant to this paragraph, including the authority, to approve 
the ‘use of electronic aunveuiianee as defined in the Foreign 
Intelligence Surveillance Act of 1978, as amended, shall be 
exercised in accordance with that Act. 
2.6 Assistance to Law Enforcément and other Civil Authorities. 
Elements of the Intelligence Community are authorized to: 

(a) Coopezate with appropriate law enforcement agencies for 
the purpose of protecting the employees, information, Property, 


‘and facilities of any elemént of the Intelligence Community; 


(b) Unless otherwise precludéd by law or this Order, 











participate in law enforcement activities to investigate or 


prevent clandestine intelligence activities by foreign powers, 
or international terrorist or Narcotics activities; 

(c) Provide specialized equipment, technical knowledge, or 
assistance of expert personnel for use by any department or 
agency, or shen lives are endangered, £6 support local law 
enforcement agencies. Provision of assistance by expert 
personnel shall be approved in each case by the general counsel 
of the providing element or department; and 

(d) Render any other assistance and cooperation to law 
enforcement or other civil authorities not precluded by 
applicable law. 

2.7 Contracting. Elements of the Intelligence Community are 
authorized., -to enter into-contracts: or arrangements £6r the 
Provision of goods or services with private companies or 
institutions in the United States and ‘need not reveal the 
sponsorship of such eontracte or arrangements for authorized 
intelligence purposes. Contracts or arrangements with academic 
institutions may be undertaken only with the consent of 
appropriate officials of the institution. 

2.8 Consisténcy With Other Laws. “Nothing in this Order shall ‘be 
construed to authorize any activity in violation of the 
Constitution or statutes of the United States. 

2.9 Undisclosed Participation in Organizations Within the 
United States. No one acting on behalf of elements of the 
Intelligence Community may join or otherwise participate in any 
organization in the United States on behalf of any element of 
the Intelligence Community without disclosing such person's 
intelligence affiliation to appropriate officials of the 
organization, except in accordance with procedures established 
by the head of the Intelligence Community element concerned or 


the head of a department containing such element and approved by 
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the Attorney General, after consultation with the Director. 


Such participation shail be authorized only if it is essential 






to achieving lawful purposes as determined by the Intelligence 






Community element head or designee. No such participation may 





be undertaken for the purpose of influencing the activity of the 





Organization or its members except in cases where: 





(a) The participation is undertaken on behalf of the FBI in 






the course of a lawful investigation; or 






(b) The organization concerned is composed primarily of. 






individuals who are not United States persons and is reasonably 






believed to be acting on behalf of a foreign power. 






2.10 Human Experimentation. 






No element of the Intelligence 





Community shall Sponsor, contract for, or conduct research on 






human subjects except if accordance with guidelines issued by 





the Department of Health and Human Services. The subject's 





informed consent shall be documented as required by those 





guidelines. i ' 





2.11 Prohibition on Assassination, 





No person employed by or 





acting on behalf of the United States Government shall engage in 





Or conspire to engage in assassination. 






‘2.12 Indirect Participation. 





No element of the Intelligence 





Community shall participate in or request any person to 






undertake activities forbidden by this Order. 






2.13 Limitation on Covert Action. 





No covert action may be 





conducted which 






is intended to influence United States political 






processes, public opinion, policies, or media. 







PART 3 General Provisions 





3.1 Congressional Oversight. 





The duties and responsibilities of 





the Director and the heads of other departments, agencies, 







elements, and entities engaged in intelli 






gence activities to 





cooperate with the Congress in the conduct of its 






responsibilities for oversight of intelligence activities shall 








be implemented in accordance-with applicable law, including 
title V of the Act. The requirements of applicable law, 
including title V of the Act, shall apply to all covert action 
activities as defined in this Order. 

3.2 Implementation. The President, supported by the NSC, 

and the Director shall issue such appropriate. directives, 
procedures, and guidance as are necessary to implement this 
order. Heads of elements*within the Intelligence eonmunaey 
shall issue appropriate procedures and supplementary directives 
‘consistent with this order. No procedures ‘to implement Part 2 
of this order shall be issued without the Attorney General’s 
approval, after consultation with the Director. The Attorney 
General shall provide a statement of reasons for not approving 
- any procedures establitshed--by- the head of an eleémént in the 
Intelligence Community (or the head of the department containing 
such elemént) other than the FBI. In instances where the 
element ‘head or department head and the Attorney General are 
unable to reach agreements on other than constitutional or other 
legal grounds, the Attorney General, the head of ‘department 
concerned, or the Director shall refer the matter to the NSC. 
3.3 Procedures. The activities herein authorized that 

require procedures shall be conducted in accordance with 
existing procedures or requirements established under Executive 
Order 12333. New procedures, as required by Executive 

Order 12333, as further amended, shall be established as 
expeditiously as possible. All new procedures promulgated 
pursuant to Executive Order’ 12333, as amended, shall be made 
available to the Select Committee on Intelligence of the Senate 
and the Permanent Select Committee on Intelligence of the House 


of Representatives. 


3.4 References and Transition. References to. "Senior Officials 


of the Intelligence Community" ór "SOICs" in executive orders or 
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other Presidential guidance, shall be deemed references 


heads of elements in the Intelligence Community, unless the 


President otherwise directs; réferences in Intelligence 
Community or Intelligence Community element policies or 
guidance, shall be deemed to be references to the heads of 
elements of the Intelligence Community, unless the President or 


the Director otherwise directs. 


3.5 Definitions. For the purposes of this Order, the following 


terms shall have these meanings: 


(a) Counterintelligence means information gathered and 
activities conducted to identify, deceive, exploit, disrupt, or 
Protect against espionage, other intelligence activities, 
sabotage, or assassinations conducted for or. on behalf -of 


foreign povers, organizations, or persons, or their agents, or 


international terrorist organizations or activities. 


(b) Covert action means an activity or activities of the 


United States Government to influence political, economic, or 


military conditions abroad, where it is intended that the role 
of the United States Government will not be apparent or 


acknowledged publicly, but does not include: 


(1) Activities the primary purpose of whitch is to 
acquire intelligence, traditional counterintelligence 
activities, traditional activities to improve or maintain the 
operational sesuci of United States Government programs, or 
administrative activities; 

(2) Traditional diplomatic or military activities or 


routine support to such activities; 


(3) Traditional law enforcement activities conducted 


by United States Government law enforcement agencies or routine 


Support to such activities; or 


(4) Activities to provide routine Support to the 


Overt activities (other than activities described’ in 
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paragraph (1), (2), or (3)) of other United States Government 


agencies abroad, 

(c) Electronic surveillance means acquisition of a 
nonpublic communication by electronic means without the consent 
of a person who is a party ‘to an electronic communication or, in 
the case of a nonelectronic communication, without the consent 
of a- person who is visibly present at tħe place of l 
communication, but not including the use of radio direction- 
finding equipment solely to determine the location of a 
transmitter. i 

(da) Employee means a person employed by, assigned 
or detailed to, or acting for an element within the Intelligence z : i 
Community. - 

(e) Foreign intelligence means information relating to the. 
capabilities, intentions, or activities of foreign governments 
Or elements thereof, foreign organizations, foreign persons, or 
international terrorists. 

(£) Intelligence en intelligence and 
counterintelligence. . 

(g) Intelligence activities means all’ activities that i 
elements of the Intelligence Community are authorized to conduct 
pursuant to this order. 

(h) Intelligence Community and elements of the 
Intelligence Community refers to: 

(1y The Office of the Director of National 
Intelligence; 
l (2) The Central Intelligence Agency; 
(3) The National Security Agency; 
(4) The Defense Intelligence Agency;- 
(5) The National Geospatial-Intelligence Agency; 


(6) The National Reconnaissance Office; 


(7) The other offices within the Department 
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of Defense for the collection of specialized national foreign 


intelligence through reconnaissance programs; , 

(8) The intelligence and counterintelligence 
elements of the Army, the Navy, the Air Force, and the Marine 
Corps; i 

(9) The intelligencé elements of the Federal. Bureau 
of Investigation; 

(10) The, Office of National Security Intelligence of 
the Drug Enforcement Administration; 

(11) The Office of eegene and 
Counterintelligence of the Department of Energy; 

-(12) The Bureau of Intelligence and Research of the 
Department of State; l 

(13). The Office of Intelligence and Analysis of ‘the 
Department of the Treasury;. 

(14) The Office of Intelligence and Analysis of the 
Department of Homeland Security; 

(15) The intelligence and counterintelligence 
elements of the Coast Guard; and 

(16) Such other elements of any department or agency 
as may be designated by the President, or designated jointly by 
the Director and the head of the department or agency concerned, 
as an element of the Intelligence Community. 

(i) National Intelligence and Intelligence Related to 
National Security means. all intelligence, regardless of the 
source from which derived and including information gathered 
within or outside the United States, that pertains, as 
determined consistent with any guidance issued by the President, 
or that is determined for the purpose of access to information 
by the Director in accordance with section 1.3(a) (1) of this 


order, to pertain to.more than one United States Government 


agency; and that involves threats to the United States, its 











people, property, or interests; the development, proliferation, 


or use of weapons of mass destruction; or any other matter 
bearing on United States national or homeland security. 

(j) The National Intelligence Program means all programs, 
projects, and activities of the Intelligence Community, as well 
as any other programs of the Intelligence Community designated | 
jointly by the Director and the head of a United states 
department or agency or by the President. Such term does not 
include programs, projects, or activities of the military 
departments to acquire intelligence solely for the planning and 
conduct of tactical military operations by United States Armed 
Forces. 

(k) United States person means a United States citizen, an 
alien known: by thé intelligence element concerned to be a 
permanent resident alien, an unincorporated association 
substantially composed of United States citizens or permanent 
resident aliens, or a corporation incorporated in the 
United States, except for a corporation directed and controlled 
by a’foreign government or governments. 

3.6 Revocation. Executive Orders 13354 and 13355 of August 27, 
2004, are. revoked; and paragraphs 1.3(b) (9) and (10) of Part 1 
supersede provisions within Executive Order 12958, as amended, 
to the extent such provisions in Executive Order 12958, as 
amended, are inconsistent with this Order. 

3.7 General Provisions: 

{a) Consistent with section 1.3(c) of this order, nothing 

in this order shall be construed to impair or otherwise affect: 
(1) Authority granted by law to a department or 
agency, or the head thereof; or 
(2) Functions of the Director of the Office of 


Management and Budget relating to budget, 


administrative, or legislative proposals. 











(b) This order shall be implemented consistent with 
applicable law and subject to the availability of 
appropriations. 

(c) This order is intended only to improve the internal 
management of the executive branch and is not intended to, 
and does not, create any right or benefit, substantive or 
procedural, enforceable at law or in equity, by any party 
against the United States, its departments, agencies or 
entities, its officers, employees, or agents, or any other 


person, 


/s/ Ronald Reagan 


THE WHITE HOUSE 


December 4,. 1981 
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Appendix D: Superceded Documents and NFIP, MIOG, and MAOP 
Sections 


(U//FOUO) This Manual supersedes the following FBI policies and procedures: 


(U//FOQUO) The following MIOG sections are superseded by the DIOG: 


MIOG Section , DIOG Section 
Introduction = DIOG Preamble 
'MIOG 1-1 Authority of a Special Agent DIOG 2.4.H 
MIOG 1-2 Investigative Responsibility DIOG 3.3 
DIOG 3.4 
DIOG 5.6 
MIOG 1-3 The Attorney General’s Guidelines DIOG Preamble 
DOIG 2.1 
‘MIOG 1-4 Investigative Authority and 1st Amendment DIOG 4.2 
DIOG 2.4.A 3 
Mail Cover Sites 
MIOG Part 2, 10-6.2 and 3 -DIOG 113 
` Consensùal Monitoring 
MIOG Part 2.. 10-10.1 —10.10.6 i DIOG 11.5 
Monitoring Communications with Persons Outside the US 
MIOG, Part 2, 23-4.10. DIOG 
MIOG Part 2 10-10.4 DIOG 
MIOG, Part 2, 10-10.3, and Part 1, 289-13.3. DIOG 
CCTV 
> MIOG Part 2 10-10-8 l DIOG 11.6.3 
MIOG Part 2 10-10.9.1 . DIOG 11.6.4 
MIOG part 2 10-10.9.1 DIOG 11.6.5 
MIOG Part 2 10-19 — DIOG 11.6.6 
MIOG part 2’ 10-10.9.4 DIOG 11.6.6 
Pen-Registers 
{DRAFT} 
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MIOG Part 2, Section 10-10-7 and 10-10.17 


Electronic Surveillance 
MIOG 10-8.1 

MIOG 2-9 Grand Jury [6e] 
MIOG, Part 2, 10-8.3.2 
MIOG, Part 2, 2-9.4 

MIOG Part 2, 2-9.5.1 

MIOG Part 2, 2-9.7 

MIOG Part 2, Section 2-9.8 
MIOG, Part 2, 10-9 

MIOG, Part 2, 10-9.10, § 3[a] 
MIOQG, Part 2, 10-9.10, § 3[b] 


MIOG, Part2, 10-9.10, § 3{c]. 


MIOG, Part 2, 10-9.10, § 3{d] 
MIOG, Part’2, 10-9.10, § 4 
MIOG, Part 2, 10-9.10, § 5 


DIOG 11.11 
DIOG 11.11.1 thru 11.11.10 


DIOG 11.12 
DIOG 11.12 | 
DIOG 11.12 
DIOG 11.12 
DIOG 11.12 
DIOG 11.12 
DIOG 11.12 
DIOG 11.12 
DIOG 11.12 
DIOG 11.12 
DIOG 11.12 
DIOG 11.12 ‘ 
DIOG 11.12 
DIOG.11.12 


(U//FOUO) The following NFIPM. provisions are superseded by the DIOG: 


NFIPM 


Mail Cover Cites 
NFIPM 2-21 


Physical Searches-Court Order Not Required 


NFIPM 2-15 


‘Consensual Monitoring 
NFIPM 3-01 


NSLs 
NFIPM 2-17. A 


Pen Registers 
NFIPM 3-04 


Electronic Surveillance. 
NFIPM 3-04 
NFIPM 3-05.4, 3-05.8 
NFIPM 28 
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DIOG 11.3 
DIOG 11.4 
DIOG 11.5 
DIOG 11.9 


DIOG 11.9.3 


DIOG 11.11 
DIOG 11.11.1 thru 11.11.10 


DIOG 11.12 
DIOG 11.12 
DIOG 11.12 
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(U//FOQUO) The following Electronic Communications (EC) and FD Forms are superseded 
by the DIOG: 





EC/FD Form . DIOG 













“To Provide Guidance on Least Intrusive Techniques DIOG 4 
in National Security and Criminal Investigations,” -OGC DIOG 4.4 
EC (319X-HQ-A1487720-0GC Serial __), 12/20/2007. DIOG 11.1.1 





Mail Cover Cites ' 
‘Current policy EC dated 12172212004 DIOG 11.3 


Consensual Monitorues 


FD-670, Consensual Monitoring - Telephone Checklist DIOG 11.5 
FD-671, Consensual Monitoring — Nontelephone Checklist 





Electronic Surveillance z 
EC issued by OGC on 12/20/07 DIOG 11.12 
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Appendix E: Key Words, Definitions, and Links 
Appendix E: Key Words, Definitions, and Links — č č _ 












b2 
b7E | 
b2 
Aggrieved Person:| `` — s b7E 
Assessments: The Attorney General ’s Guidelines for Domestic FBI Operations (AGG-Dom) 
combine “threat assessments” under the former Attorney General’s Guidelines for FBI National 
Security Investigations and Foreign Intelligence-Collection and the “prompt and extremely 
limited checking out of initial leads” under the former Attorney General’s Guidelines on General 
‘Crimes, Racketeering Enterprise and Terrorism Enterprise Investigations ir ess 
investigative category entitled “assessments.” 
b2 
b7E 





| the FBI may also conduct assessments as part of its special events management 
responsibilities. (AGG-Dom, Part II) 


Closed Circuit Television (CCTV): a fixed-location video camera that is typically concealed 
from view or that is placed on or operated ‘by a consenting party. 





Consensual. Monitoring: Monitoring.of communications for which a court order or warrant is 
not legally ‘required because of the consent of.a party to the communication. 


Electronic Communication Service: Any service that provides to users thereof the ability to 
send or receive Wire or electronic communications. For example, telephone companies and 
electronic mail companies generally act as providers of electronic communication services. 


Electronic Communications System: Any wire, radio, electromagnetic, photooptical or 
photoelectronic facilities for the transmission of wire or electronic communications, and any 
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computer facilities or related electronic equipment for the electronic storage of such 
communications. 


Electronic Storage: Any temporary, intermediate storage of a wire or electronic communication 
incidental to the electronic transmission thereof, or any storage of such communication by an 
electronic communication service for purposes of backup protection of such communication. In 

_ Short, "electronic storage" refers only to temporary storage, made in the course of transmission, 
by a provider of an electronic communication service. 


Electronic Tracking Device: Direction finder including electronic tracking devices;.such as, 
radio frequency beacons and transmitters, vehicle locator units, and the various devices that use a 
Global Positioning System or other satellite system for monitoring non-communication activity. 


Employee: An FBI employee or an employee of another agency working under the direction and 
control of the FBI. 


Enterprise investigations are a type of full investigation and are subject to the same requirements 
that apply to full investigations described in Section 7. Enterprise investigations focus on groups 
or organizations that may be involved in the most serious criminal or national security threats to 
‘the public, as described in Section 8.5. Enterprise investigations cannot be conducted as 
preliminary investigations or assessments, nor may they be-conducted for the sole purpose of 
collected foreign ifitelligence. ` ` oe 


Enterprise Investigation: 


b2 
b7E 





: The Foreign Intelligence Surveillance Act of 1978, as amended: The law establishes a 
process for obtaining judicial approval of electronic surveillance and physical searches for the 
purposes of collecting foreign intelligence. Orders for ELSUR surveillance are provided for the 
period of time not to exceed: 90 days for United States persons; 120 days for Non-United States 
persons; and one year for a foreign: power. Renewal of FISA Orders may be requested for the 
same period of time originally authorized based upon a continued showing of probable cause. 
For Non-United States persons, renewals can be for a period not to exceed one year. P| 













at least 45 days prior to the expiration of the existing order. 
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For or On Behalf of a F oreign Power: The determination that activities are for or on behalf of 
a foreign power shall be based on consideration of the. extent to which the foreign power is 
involved in control or policy direction; financial or material-support; or leadership, assignments, 
or discipline. 


Foreign Computer Intrusion: The use or attempted use of any cyber-activity or other means, 
by, for, or on-behalf of a foreign power to scan, probe, or gain unauthorized access into one or 
more United States-based computers. p 


Foreign Intelligence: Information relating to the capabilities, intentions, or activities of foreign 
governments or elements thereof, foreign organizations or foreign persons, or international 
terrorists. 


Foreign Intelligence Requirements: 


5. National intelligence requirements issued pursuant to authorization by the Director of 
National Intelligence, including the National Intelligence Priorities Framework and the 
National HUMINT Collection Directives, or any successor directives thereto; 


6. Requests to collect foreign intelligence by the President or by Intelligence Community 


officials designated by the President; and os 
7. Directions to collect foreign intelligence by the Attorney General, the Deputy Attorney ` 
General, or an official designated by the Attorney General. 


the United States; a faction of a foreign nation or nations, not substantially composed of United 
States persons; an entity that is openly acknowledged by a foreign government or governments:to 
be directed and controlled by such foreign government or goverhments; a group engaged in 
international terrorism or activities in preparation therefore; a foreign-based political 
organization, not substantially composed of United States persons; or’an entity that is directed or 
controlled by a foreign.government or governments. ` 


Foreign Power: A foreign government or any component thereof, whether or not recognized by 


Full Investigation: A full investigation may be. initiated if there is an articulable factual basis for 
the investigation that reasonably indicates that a circumstance described in paragraph 3.a.-.b. 


exists or if a‘circumstance described in paragraph 3.c. exists All lawful methods may be used.in a 
full investigation. 


A full investigation of a group or organization may be initiated as an enterprise investigation if 
there is an articulable factual basis for-the investigation that reasonably indicatés that the group 
or organization may have engaged or may be engaged in, or may have or may be engaged in 


planning or preparation or provision of support for: 
l. apattern of racketeering activity as defined in 18 U.S.C. § 1961(5); 
2. ‘international terrorism or other threat to the national security; 


3. domestic terrorism as defined in 18 U.S.C. § 2331(5) involving a violation of federal 
criminal law; 


“4. furthering political or social goals wholly or in part through activities that involve force 
or violence and a violation of federal ‘criminal law; or ' 
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5. an offense described in 18 U.S.C. §§ 2332b(g)(5)(B) or 18 U.S.C. § 43. 


Human Source: A Confidential Human Source as defined in the Attorney General=s Guidelines 
` Regarding the Use of FBI Confidential Human Sources. 


Intelligence Activities: Any activity conducted for intelligence purposes or to affect political or 
governmental processes by, for, or on behalf of a forcign power. 


International Terrorism: Activities that involve violent acts or acts dangerous to human life 
that violate federal, state, local, or tribal criminal law or would violate such law if committed 
within the United States or a state, local, or tribal jurisdiction; appear to be intended to intimidate 
or coerce.a civilian population; to influence the policy of a government by intimidation or 
coercion; or to affect the conduct of a government by assassination or kidnapping; and occur 
totally outside the United States, or transcend national boundaries in terms of the méans by 
which they are accomplished, the persons they appear to be intended to coerce or intimidate, or 
the locale in which their perpetrators operate or seek asylum. 


National Security Letters: an administrative demand for documents or r records that can be made 
by the FBI during a-predicated investigation relevant-to a threat to national security The standard 
for issuing an NSL, except under 15 U.S:C. § 1681v, is relevance to an authorized investigation 


to protect against international terrorism or clandestine intelligence activities, provided-that such _ 


an investigation of a United: States person is not predicated solely on activities protected by the. 
Amen ent oF the Von jon of the United: Sta 





Pen Register Device: Records or decodes dialing, routing addressing or signaling information 
transmitted by an instrument or facility from which.a wire or electronic communication is 
transmitted, provided that such information must not include the contents.of any communication. 


Physical Surveillance: The deliberate observation by an FBI employee of persons, places, or 
events, on either a limited or continuous basis, in a public or a: Bete DUP (e.g., commercial 
business open to, the. public) setting. 


Preliminary Investigation: Lega investigations may be carmed out to dateci, cork 
information about, or prevent ọ agg 2 
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The investigation of threats to the national security may constitute an exercise of the FBI’s 
criminal investigation authority as well as its authority to investigate threats to the national 
security. As with criminal investigations, detecting and solving crimes and arresting and 
prosecuting the perpetrators are likely objectives of investigations relating to threats to the 
national security. These investigations, however, serve important purposes outside the ambit of 
normal criminal investigations, by providing the basis for, and informing-decisions concerning 
-other measures needed to protect the national security. ` 


Proprietary: A sole proprietorship, partnership, corporation, ot other business entity operated on 
a commercial basis, which is owned, controlled, or operated wholly or in part on behalf of the 
FBI, and whose relationship with the FBI is concealed from third parties, 


Provider of Electronic Communication Services: Any service that provides the user thereof’ 
the ability to send or receive wire or electronic communications. 


Publicly Available: Information that has been published or broadéast for public consumption, is 
available on request to the public, is accessible on-line or otherwise to the public, is available to 
the public by subscription or purchase, could be seen or heard by any casual observer, is made 
available at a meeting open to the public, or is obtained by visiting any place or attending any 
event that is open to the public. 


Records: Any records, databasés, files, indices, information systems, or other retained 

information. 

b2 
b7E 


Remote Computin 





Sensitive Investigative Matter: An investigative matter involving a domestic public official, 
political candidate, religious or political organization or individual prominent in such an 
organization, or news media, or any other matter which, in the judgment of the official 
authorizing an investigation, should be brought to the attention of FBI Headquarters and other 
Department of Justice officials. l 


Sensitive Circumstance: 
Sensitive Monitoring Circumstance: 


1. Investigation of a member of Congress, a federal judge, a member of the Executive 
Branch at Executive Level IV or above, or a person who has served in such capacity 
within the previous two years; (Note: Executive Levels I through IV are defined in 5: 
U.S.C. §§ 5312-5315.) 


2. Investigation of the Governor, Lieutenant Governor, or Attorney General of any state or 
territory, or à judge or justice of the highest court of any state or territory, concerning 
an offense involving bribery, conflict of interest, or-extortion related to the performance 
of official duties; 


3. A party to the communication is in the custody of thé Bureau of Prisons or the United 
States Marshals Service or is being or hasbeen afforded protection in the Witness 
Security Program; or 
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4. The Attorney General, the Deputy Attorney General, or an Assistant Attorney General 
has requested that the FBI obtáin prior approval for the use of consensual monitoring in 
a specific investigation. 


Special Agent in Charge: The Special Agent in Charge ofan FBI Field Office (including an: 
Acting Special Agent in Charge), except that the functions authorized for Special Agents in 
Charge by these Guidelines may also be exercised: by the Assistant Director in Charge or by any 
Special Agent in Charge designated by the Assistant Director in Charge in an FBI Field Office 


headed by an Assistant Director, and by FBI Headquarters officials designated by the Director of 
the FBI. 


Special Events Management: Planning and conduct of public events or activities whose 
character may make.them attractive targets for terrorist attack. 


State, Local, or Tribal: Any state or territory of the United States or political subdivision 
thereof, the District of Columbia, or Indian tribe. 


Surveillance: 
I. Electronic surveillance (ELSUR) is the non-consensual electronic collection of 


information (usually communications) under circumstances in which the'parties havea . 
reasonable expectation of privac derso 2 auirdd 












p2 





b7E 
2. Physical surveillance is the deliberate observation by an FBI employee or a CHS of 
persons, places, or events, on either a limited or continuous basis, in a public or a semi- 
public (e.g., commercial business open to the public) settine 
b2 
b7E 


Threat-to the National Security: International terrorism; espionage and other intelligence 
activities, sabotage, and assassination, conducted by, for, or on behalf of foreign powers, 
organizations, or persons; foreign.computer intrusion; and other matters determined by the 
Attorney General, consistent with Executive Order 12333 or a successor order. 


Trap and Trace Device: Captures the incoming electronic or other impulses that identify the . 
originating number or other dialing, routing, addressing or signaling information reasonably 
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likely to identify the source of a wire or electronic communication, provided that such 
information does not include the contents of any communication. 


Undercover Activity: Any investigative activity involving the use of an assumed identity by an 
undercover employee for an official purpose, investigative activity, or function: 


Undercover Employee: An employee of the FBI, another federal, state, of local law 
enforcement agency, another entity of the United States Intelligence Community, or another 
foreign intelligence agency working under the direction arid control of the FBI whose 
relationship with the FBI is concealed from third parties by the maintenance of a cover or alias 
identity for an official purpose, investigative activity, or function. 


b2 
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Undercover Oper 





United States: When used in a geographic sense, means all areas under the territorial 
sovereignty of the United States. ‘ 


United States Person: Any of the following, but not including any association or corporation 
that:is a foreign power as defined in Subpart G.1.+.3.: i 


1. An individual who is a United States citizen or an-alien lawfully admitted for 
permanent residence; i 


2. An unincorporated association substantially composed of individuals who are United 
States persons; or 


3. A corporation incorporated in the United States. 


In applying paragraph 2., if a group or organization in the United States that is affiliated with 
a foreign-based international organization operates directly under the control of the 
international organization and has no independent program or activities in the United States, 
the membership of the entire international organization shall be considered in determining 
whether it is substantially composed of United States persons. If, however, the United States- 
based group or organization has programs or activities separate from, or in addition to, those 
directed by the international organization, only its membership in the United States shall be 
considered in determining whether it is substantially composed of United States persons. A. 
classified directive provides further guidance concerning the determination of United States 
person status. 


Use: When used with respect to human sources, means obtaining information from, tasking, or 
otherwise operating such sources. 
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Appendix F: Acronyms 
ACS Automated Case Support 
AD Assistant Director 
ADIC Assistant Director in Charge 
AFID Alias False Identification 
AG Attorney Genéral 
AGG Attorney General Guidelines 
AGG-CHS The Attorney General’s Guidelines Regarding the Use of FBI Confidential 
Human Sources 
AGG-Dom The Attorney General’s Guidelines for Domestic FBI Operations 
AGG-Ext The Attorney General’s Guidelines for Extraterritorial FB] Operations 
AGG-UCO The Attorney General’s Guidelines on FBI Undercover Operations 
AOR Area of Responsibility 
ASAC Assistant Special Agent in Charge 
ATF Bureau of Alcohol, Tobacco, Firearms and Explosives 
AUSA Assistant United States Attorney 
BOP Bureau of Prisons 
BSA Bank Secrecy Act 
CALEA Communications Assistance for Law Enforcement Act: 
CAU Communications Analysis Unit 
‘CCTV Closed Circuit Television 
CD Counterintelligence Division 
CDC Chief Division Counsel 
C.F.R. Code of Federal Regulations 
CHS Confidential Human Source 
CHSPM Confidential Human Source Policy Manual 
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CHSVSM 
CIA 
CID 
CLEA 
: CMS 
CPO 
cso 
CTD 
CUORC 
cw 
DAD- 
DAG 
D.C. 
DCO 
D.D.C. 
DI 
DIOG. 
DMS 
DNI 
DOD 
DOJ 
DOS 
EA 
EAD 
EC 
ECPA 
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Confidential Human Source Validation Source Manual 
Central Intelligence Agency 

Criminal Investigative Division 

Criminal Law Enforcement Application 

Collection Management Section 

Corporate Policy Office 

Chief Security Officer 

Counterterrorism Division 

Criminal Undercover Operations Review Committee 
Cooperative Witness 

Deputy: Assistant Director 

Deputy Attorney General 

District of Columbia 

Division Compliance Officer 

Department Document Committee 


Directorate of Intelligence 


Domestic Investigations Operations Guide 


Domain Management Section 
Director of National. Intelligence 
Department of Defense 
Department of Justice 


Department of State 


“Emergency Authority 


Executive Assistant Director 
Electronic Communication 


Electronic: Communication Privacy Act 
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ECS 
ELSUR 
EO 
ERS 
ESN 
ESU 
FAA 
FBI 
FBIHQ 
FBINET 
FCC 
FCRA 
FGI 
FGUSO 
FI 
FI 
FICP 
FIG 

` FISA 
FISAMS 
FISC 
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Electronic Communication Service 

Electronic Surveillance 

Executive Order 

ELSUR Records System 

Electronic Serial Number 

Electronic Surveillance Unit 

Federal Aviation Administration 

Federal Bureau of Investigation 

FBI Headquarters 

FBI Network 

Federal Communications Commission 

Fair Credit Reporting Act ' 

Federal Grand Jury 

Field Guide for Undercover and Sensitive Operations 
Foreign Intelligence 

Full Investigation 

Foreign Intelligence Collection Program 

Field Intelligence Group 

Foreign Intelligence Surveillance Act 

FISA Management System . 

Foreign Intelligence Surveillance Court b2 
[ = 
Federal Rules of Criminal Procedure 
For Your Information . 


b2 


Global.Positioning System 
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IA 
ICE 
ICI 

INI 
IR 

ILB 
ILU 


INTERPOL : 


IOB 
IP 
IT 
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‘General Counsel 


Human Intelligence Management Unit 
House of Representatives 


Homeland Security Council 


Homeland Security Presidential Directive 


Human Intelligence 

Intelligence Analyst 

Bureau of Immigration and Customs Enforcement 
Intranet to Counterintelligence 

Innocent Images National Initiative 

Intelligence Information Reports 

Investigative Law Branch 


Investigative Law Unit 


‘International Criminal Police Organization 


Intelligence Oversight Board 
Internet Protocol 
International Terrorism 


Legal Attaché 


Letterhead Memorandum 


Manual of Administrative Operations and Procedures 
Monthly Administrative Report 

Manual of Investigative Operations and Guidelines» 
Mutual Legal Assistance Treaties 


Memorandum of Agreement 


‘Mobile Station Identification Number 


Memorandum of Understanding 
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NAFTA 
NARA 
NATO 


NCTAUS 


NCTC 
NCMEC 
NFIPM 
NFPO 


- NHCD 


NIPF 
NISS 
NSB 
NSC 
NSD 
NSL 
NSLB 
NSPD 
NSSE 
OCA 
OEO 
OGC 
Ol 
OIA 


OIC 
OIO 
OMB 
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North American Free Trade Association 

National Archives and Records Administration 

North Atlantic Treaty Agreement 

National Commission on Terrorist Attacks upon the United States 
National Counterterrorism Center 

National Center for Missing & Exploited Children 

National Foreign Intelligence Program Manual 

No Foreign Policy Objection 

National HUMINT Collection Directives 


National Intelligence Priorities Framework 


- National Information Sharing Strategy 


~ National Security Branch 


National Security Council, 
National Security Division, DOJ 
National Security Letter 

National Security Law Branch 
National Security Presidential Directive 
National Special Security Events. 
Office of Congressional: Affairs 
Office of Enforcement Operations 
Office of the General Counsel 
Office of Intelligence, DOJ NSD 
Otherwise Illegal Activity 

Office of Integrity and Compliance 
Office of International Operations 


Office of Management and Budget 
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Office of Origin 
Operational Technology Division 
Privacy and Civil Liberties Unit 
Post Cut-Through Dialed.Digits 
Presidential Directive 
Presidential Decision Directive 
Preliminary Investigation 
Privacy Impact Assessment 
Policy-Implementation Guide 
Potential Intelligence Oversight Board 
Public Law ` - 
Pen Register 
| Pen Register/Trap and Trace 
Remote Computing Semice 
Radio Frequency 
Right to Financial Privacy Act 
Racketeer Influenced and Corrupt Organizations 
Records Management Division 
Requirements Oversight and Coordination Unit 
Special Agent . 
Special Agent in Charge 
Subpoena Sub-filé 
Section Chief 
‘Sensitive Compartmentalized Information 
Sensitive Compartmentalized Information Operational Network: 


Supervisory Intelligence Analyst 
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SMTJ 
SOG 
SORC 
_ SPM 
SSA ’ 
SSG 
SSRA 
TA 
TFO 
TMD 
TS 
TT 
TTA 
UACB 
uc 
U.C. 
UCE 
UCFN 
UCO. 
UCRC 
ÚDP 
USAO 
U.S.C. 
USIC 
USMS 
USP 
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Special Maritime and Territorial Jurisdiction 
Special Operations Group 

Sensitive Operations Review Committee 
Security Program Manager | 
Supervisory Special Agent 


Special Surveillance Group 


Supervisory Senior Resident Agent 


Technical Advisor 

Task Force Officer 

Technical Management Database 
Top Secret . 
Trap and Trace 

Technically Trained Agent 

Unless Advised Contrary by Bureau 
Undercover 

Unit Chief 

Undercover Employee 

Universal Case File Number 
Undercover Operations 

Undercover Review Committee 
Undisclosed Participation 

United States Attorney’s Office 
United States Code 

United States Intelligence-Commuinity 
United States Marshals Service 


US Person 
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USPER 
USPS: 
USSS 
WITT 
WMD 
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US Person 

United States Postal Service 

United States Secret Service 

Wireless Intercept Tracking Technology 


Weapons of Mass Destruction 


F-8 
FOR OFFICIAL USE ONLY 










ALL FBI INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE 07-08-2009 BY 60322 UC/LP/STP/JCF 
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Appendix G: Investigations Manual —-Classified Provisions 


See DIOG Appendix G: 


= - b2 
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DATE: 07-08-2009 i 
FBI INFO. E z 
CLASSIFIED BY 60322 UC/LP/STP/JCF 
REASON: 1.4 {c, d) DERIVATIVE 


sBpQ@TINOFORN DECLASSIFY ON: 07-08-2034 
(U) Domestic Investigations and Operations Guide Classified Provisions 
(U) This Part supplements the unclassified provisions of the AGG-Dom and DIOG. (U) 
A. (U):LIMITATION ON CERTAIN SEARCHES 


(U) Classified AGG-DOM Provision (U) 


Me, 


Me, 


(U) Policy To Implement Classified AGG-DOM Provision 


(U).Refer to. the Domestic Investigations a Operations Guide (DIOG) Section 11.13 
for procedures to obtain a FISA search w warrant. 


B. (U) CIRCUMSTANCES WARRANTING A PRELIMINARY OR FULL 
INVESTIGATION 


(U) Classified AGG-DOM Provision: 


Derivé $ € Sources 
on: Decem er 
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(U) Policy to Implement Classified AGG-Dom Provision 


The provisions of DIOG Section 6 (Prelimary Investigations) or 7 (Full Investigations) 
with regard to the purpose, approval and notification requirements apply fully to 
investigations predicated under this provision. 


. (U) DETERMINATION OF UNITED STATES PERSON STATUS 
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thas, 


E. (U)-ASSISTANCE TO-AND/OR FROM F OREIGN. AGENCIES: 





F. (U) CONSENSUAL MONITORING , 







ma, 







e 
3 





SECRET/NOFORN 


Domestic Investigations and Operations Guide Classified Provisions (U) 


(u)—--( SAF) Member of the media or a.news organization—An investigation of a member 
of the media or a news organization is a.sensitive investigative matter. A news 
organization is an entity that regularly publishes or broadcasts news. [National Security | 
Archive v. Department of Defense, Civil No. 86-3454 (D.D.C. June 16, 1988 





(5) e = 





tU)». ) Any subject måtter inte to the Memomncun, of Understanding (MOU) 
‘between the FBI and United States Department of State must comply with the existing: 
process contained within the MOU. 


H. (UJ DATA MINING 


ae ~~{S#NE) Data analysis conducted by the FBIHQ Counterintelligence Division such as 
Bt a eT ae be coordinated with 
the FBI Headquarters’ Office of the General Counsel, Privacy and Civil Liberties Unit 
regarding the proper documentation and disposition of such analysis. 
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b1 
b2 
b7E 


b2 
b7E 


b1 


- b2 


b7E 
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I. (U) NOTICE REQUIREMENTS- FOR DOJ NATIONAL SECURITY DIVISION 


‘assistance to other agencies” involving a sensitive investigative matter that is 
classified “Secret,” the appropriate FBIHO Section should send electronic notice 
to DOJ NSD E For a national security investigation 
or “assistance to other agencies” involving a sensitive investigative matter that is 
classified “Top Secret,” the appropriate FBIHQ Section should send electronic 
notice to DOJ NSD jee ae to DOJ NSD must only 
contain the Letterhead Memorandum (LHM)—the electronic communication (EC) 
is not sent to DOJ NSD. ' 


W) -—L.-{$Y Sensitive Investigative Matter: For a national security investigation or 


(0) ~-2--'8Y National Security Full Investigation of a United States Person: For a full 
investigation of a United States person relating to a threat to the national security 
that is classified “Secret,” the appropriate FBIH: jon should send-electronic 
notice to DOJ NSD eee full investigation of 
a United States person relating to a threat-to the-national security-that is-classified 
“Top Secret,” the appropriate FBIH tion should send electronic notice to 
DOJ NSD e ane DOJ NSD must only contain 
the LHM—the EC is not sent to.DOJ NSD. 

V1 -3--~ X) Assistance to a Foreign Agency: When FBIHQ approval is required to 
provide assistance to a foreign agency in a matter involving a threat to the 


national security, notice must be provided to DOJ NSD. For a foreign assistance 
matter that is classified “Secret,” the appropriate FBIHQ Division approving the 


investigative method should send electronic notice to DOJ NSD at 

For a foreign assistance matter that is classified “Top 
Secret,” the appropriate FBIHQ Division approving the investigative method 
should send electronic notice to DOJ NSD fh c= INGE to 
DOJ NSD must only contain the LHM—the EC is not sent to DOJ NSD. 
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